)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"8a00974e377f84c27210876ee4ca64afd38d06b0","unresolved":false,"context_lines":[{"line_number":9,"context_line":"Only query for trust when not authenticated as admin."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Change-Id: I1ec2cb0d06de4c524421e127c1ab0060f1cfc7e5"},{"line_number":12,"context_line":"Closes-Bug: LP #1263804"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"AAAAT3%2F%2F4kI%3D","line":12,"updated":"2013-12-28 04:20:17.000000000","message":"Remove \"LP\" from the closes-bug line, this will allow the bug to link to the LP bug in the gerrit web interface.","commit_id":"b1df1580722baf979a64a26ab6f1d158476df212"}],"keystone/contrib/ec2/controllers.py":[{"author":{"_account_id":4328,"name":"Steven Hardy","email":"steven.hardy@suse.com","username":"shardy"},"change_message_id":"56850133dad36f83fce27ff468eb750472a980aa","unresolved":false,"context_lines":[{"line_number":150,"context_line":"        trust_id \u003d None"},{"line_number":151,"context_line":"        if not self._is_admin(context):"},{"line_number":152,"context_line":"            self._assert_identity(context, user_id)"},{"line_number":153,"context_line":"            trust_id \u003d self._context_trust_id(context)"},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"        self._assert_valid_user_id(user_id)"},{"line_number":156,"context_line":"        self._assert_valid_project_id(tenant_id)"}],"source_content_type":"text/x-python","patch_set":1,"id":"AAAATn%2F8mkw%3D","line":153,"updated":"2013-12-24 13:42:46.000000000","message":"This means that trusts are worthless for any user who has the admin role, not just the service admin token.\n\nConsider when https://bugs.launchpad.net/keystone/+bug/968696 gets fixed, this then becomes a giant security hole where any user delegating a role via impersonation to an admin user in another project effectively delegates everything whether they want to or not (defeating the entire point of trusts)","commit_id":"b1df1580722baf979a64a26ab6f1d158476df212"}],"keystone/tests/test_keystoneclient_sql.py":[{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"0026d4cbbdae7838518487779b9975aef8d52176","unresolved":false,"context_lines":[{"line_number":311,"context_line":""},{"line_number":312,"context_line":"    def test_endpoint_create_404(self):"},{"line_number":313,"context_line":"        from keystoneclient import exceptions as client_exceptions"},{"line_number":314,"context_line":""},{"line_number":315,"context_line":"        client \u003d self.get_client(admin\u003dTrue)"},{"line_number":316,"context_line":"        self.assertRaises(client_exceptions.NotFound,"},{"line_number":317,"context_line":"                          client.endpoints.create,"}],"source_content_type":"text/x-python","patch_set":1,"id":"AAAAT3%2F%2F4jI%3D","line":314,"updated":"2013-12-28 04:21:13.000000000","message":"Is there a reason this import can\u0027t be in the \"normal\" import section at the top of the file?","commit_id":"b1df1580722baf979a64a26ab6f1d158476df212"}]}