)]}'
{"keystone/common/policies/user.py":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"87ea5541aba7beeb761779f70b50fd0aba2f0e3c","unresolved":false,"context_lines":[{"line_number":109,"context_line":"                     \u0027method\u0027: \u0027GET\u0027}]),"},{"line_number":110,"context_line":"    policy.DocumentedRuleDefault("},{"line_number":111,"context_line":"        name\u003dbase.IDENTITY % \u0027create_user\u0027,"},{"line_number":112,"context_line":"        check_str\u003d\u0027role:admin\u0027,"},{"line_number":113,"context_line":"        # FIXME(lbragstad): This can be considered either a system-level policy"},{"line_number":114,"context_line":"        # or a project-level policy. System administrator should have the"},{"line_number":115,"context_line":"        # ability to create users in any domain. Domain (or project)"}],"source_content_type":"text/x-python","patch_set":4,"id":"dfd5e7cf_6bb678fd","line":112,"range":{"start_line":112,"start_character":18,"end_line":112,"end_character":30},"updated":"2019-01-09 17:06:24.000000000","message":"This needs to include system scope otherwise it will be possible for anyone with the admin role to do user operations.","commit_id":"294e7d63caf8187af27c62756ab71f565766f07d"}],"keystone/tests/unit/protection/v3/test_users.py":[{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"c562e1994df8e5b5ad1e1bae5519d39ab1b4eb03","unresolved":false,"context_lines":[{"line_number":213,"context_line":"        self.useFixture(ksfixtures.Policy(self.config_fixture))"},{"line_number":214,"context_line":"        self.config_fixture.config(group\u003d\u0027oslo_policy\u0027, enforce_scope\u003dTrue)"},{"line_number":215,"context_line":""},{"line_number":216,"context_line":"        self.user_id \u003d self.bootstrapper.admin_user_id"},{"line_number":217,"context_line":"        auth \u003d self.build_authentication_request("},{"line_number":218,"context_line":"            user_id\u003dself.user_id,"},{"line_number":219,"context_line":"            password\u003dself.bootstrapper.admin_password,"}],"source_content_type":"text/x-python","patch_set":5,"id":"9fdfeff1_10a9cb8e","line":216,"range":{"start_line":216,"start_character":8,"end_line":216,"end_character":54},"updated":"2019-01-28 21:43:49.000000000","message":"Needs cleanup action (self.cleanup_instance)","commit_id":"638dcf498dbefca93dd629757cc0d88957d53a16"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"c562e1994df8e5b5ad1e1bae5519d39ab1b4eb03","unresolved":false,"context_lines":[{"line_number":224,"context_line":"        # for requests we\u0027ll be making in the tests."},{"line_number":225,"context_line":"        with self.test_client() as c:"},{"line_number":226,"context_line":"            r \u003d c.post(\u0027/v3/auth/tokens\u0027, json\u003dauth)"},{"line_number":227,"context_line":"            self.token_id \u003d r.headers[\u0027X-Subject-Token\u0027]"},{"line_number":228,"context_line":"            self.headers \u003d {\u0027X-Auth-Token\u0027: self.token_id}"},{"line_number":229,"context_line":""},{"line_number":230,"context_line":"    def test_user_can_create_users(self):"},{"line_number":231,"context_line":"        create \u003d {"}],"source_content_type":"text/x-python","patch_set":5,"id":"9fdfeff1_909cdb6a","line":228,"range":{"start_line":227,"start_character":0,"end_line":228,"end_character":58},"updated":"2019-01-28 21:43:49.000000000","message":"Same as comment above.","commit_id":"638dcf498dbefca93dd629757cc0d88957d53a16"}],"releasenotes/notes/bug-1805406-252b45d443af20b3.yaml":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"9f15a8a313e8baab9a16a3437eeb1a398b7bb9e0","unresolved":false,"context_lines":[{"line_number":14,"context_line":"deprecations:"},{"line_number":15,"context_line":"  - |"},{"line_number":16,"context_line":"    [`bug 1805406 \u003chttps://bugs.launchpad.net/keystone/+bug/1805406\u003e`_]"},{"line_number":17,"context_line":"    Several policies used to protect the user API have been"},{"line_number":18,"context_line":"    deprecated in favor of more clear and concise defaults. Please"},{"line_number":19,"context_line":"    consider these new default if your deployment overrides"},{"line_number":20,"context_line":"    user policies."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"3f79a3b5_308dbf7c","line":17,"range":{"start_line":17,"start_character":4,"end_line":17,"end_character":20},"updated":"2018-12-07 19:12:53.000000000","message":"List these out.","commit_id":"b43e5a7d81f54630035ae403e1076a2e77f11a05"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"e301a91561f61e3d74fc460696049aeac4855206","unresolved":false,"context_lines":[{"line_number":17,"context_line":"    The following user policy check strings have been deprecated in"},{"line_number":18,"context_line":"    favor of more clear and concise defaults:"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"    * ``identity:get_user``"},{"line_number":21,"context_line":"    * ``identity:list_users``"},{"line_number":22,"context_line":"    * ``identity:create_user``"},{"line_number":23,"context_line":"    * ``identity:update_user``"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"dfd5e7cf_a4e10a9d","line":20,"updated":"2019-01-08 19:34:09.000000000","message":"Update these to explain what the new policies are so that people don\u0027t have to dig through code to find that information.","commit_id":"294e7d63caf8187af27c62756ab71f565766f07d"}]}