)]}'
{"keystone/common/policies/domain.py":[{"author":{"_account_id":15054,"name":"wangxiyuan","email":"wangxiyuan1007@gmail.com","username":"wangxiyuan"},"change_message_id":"85b294fa0d6d6f332141f98c4d8f620ccc07b171","unresolved":false,"context_lines":[{"line_number":36,"context_line":"    policy.DocumentedRuleDefault("},{"line_number":37,"context_line":"        name\u003dbase.IDENTITY % \u0027get_domain\u0027,"},{"line_number":38,"context_line":"        check_str\u003d("},{"line_number":39,"context_line":"            \u0027(role:reader and system_scope:all) or \u0027"},{"line_number":40,"context_line":"            \u0027token.project.domain.id:%(target.domain.id)s\u0027"},{"line_number":41,"context_line":"        ),"},{"line_number":42,"context_line":"        # NOTE(lbragstad): This policy allows system-scope and project-scoped"}],"source_content_type":"text/x-python","patch_set":2,"id":"3f79a3b5_6507c6c8","line":39,"range":{"start_line":39,"start_character":26,"end_line":39,"end_character":46},"updated":"2018-12-11 08:02:54.000000000","message":"the reader must be system scoped?","commit_id":"9e8849561bb05f52379531bfc69da8c348f97b28"},{"author":{"_account_id":15054,"name":"wangxiyuan","email":"wangxiyuan1007@gmail.com","username":"wangxiyuan"},"change_message_id":"cd99a9c7791462424f088f1203f78af228715f78","unresolved":false,"context_lines":[{"line_number":36,"context_line":"    policy.DocumentedRuleDefault("},{"line_number":37,"context_line":"        name\u003dbase.IDENTITY % \u0027get_domain\u0027,"},{"line_number":38,"context_line":"        check_str\u003d("},{"line_number":39,"context_line":"            \u0027(role:reader and system_scope:all) or \u0027"},{"line_number":40,"context_line":"            \u0027token.project.domain.id:%(target.domain.id)s\u0027"},{"line_number":41,"context_line":"        ),"},{"line_number":42,"context_line":"        # NOTE(lbragstad): This policy allows system-scope and project-scoped"}],"source_content_type":"text/x-python","patch_set":2,"id":"3f79a3b5_885b1987","line":39,"range":{"start_line":39,"start_character":26,"end_line":39,"end_character":46},"in_reply_to":"3f79a3b5_086dc998","updated":"2018-12-11 09:25:42.000000000","message":"ah, I see that one.","commit_id":"9e8849561bb05f52379531bfc69da8c348f97b28"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"f5a34ecd6f588d166a603918e230004e91857f14","unresolved":false,"context_lines":[{"line_number":36,"context_line":"    policy.DocumentedRuleDefault("},{"line_number":37,"context_line":"        name\u003dbase.IDENTITY % \u0027get_domain\u0027,"},{"line_number":38,"context_line":"        check_str\u003d("},{"line_number":39,"context_line":"            \u0027(role:reader and system_scope:all) or \u0027"},{"line_number":40,"context_line":"            \u0027token.project.domain.id:%(target.domain.id)s\u0027"},{"line_number":41,"context_line":"        ),"},{"line_number":42,"context_line":"        # NOTE(lbragstad): This policy allows system-scope and project-scoped"}],"source_content_type":"text/x-python","patch_set":2,"id":"3f79a3b5_086dc998","line":39,"range":{"start_line":39,"start_character":26,"end_line":39,"end_character":46},"in_reply_to":"3f79a3b5_6507c6c8","updated":"2018-12-11 09:09:35.000000000","message":"Yep - domain reader support comes in a separate patch.","commit_id":"9e8849561bb05f52379531bfc69da8c348f97b28"}]}