)]}'
{"id":"openstack%2Fkeystone~670926","triplet_id":"openstack%2Fkeystone~master~I26ee11571b6d0f700a5fe3a62ad2e8fc7f5316fe","project":"openstack/keystone","branch":"master","topic":"bug/1818725","hashtags":[],"change_id":"I26ee11571b6d0f700a5fe3a62ad2e8fc7f5316fe","subject":"implement system scope for application credential","status":"MERGED","created":"2019-07-15 23:58:39.000000000","updated":"2019-07-25 17:27:26.000000000","submitted":"2019-07-25 17:27:26.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":57,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"670926-1564075646671-a91269ad","meta_rev_id":"73bf1699abfd5b3257c318ceefe73d210584fbaa","_number":670926,"virtual_id_number":670926,"owner":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},{"value":0,"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"date":"2019-07-24 22:04:49.000000000","_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"value":2,"date":"2019-07-25 17:27:26.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"all":[{"value":2,"date":"2019-07-24 22:11:55.000000000","_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":1,"date":"2019-07-25 06:04:52.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},{"value":2,"date":"2019-07-25 15:16:39.000000000","_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"all":[{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},{"value":1,"date":"2019-07-25 15:16:39.000000000","_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2019-07-24 22:11:55.000000000","updated_by":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"reviewer":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"state":"REVIEWER"},{"updated":"2019-07-25 06:04:52.000000000","updated_by":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"reviewer":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"state":"REVIEWER"},{"updated":"2019-07-25 15:16:39.000000000","updated_by":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"reviewer":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"state":"REVIEWER"},{"updated":"2019-07-25 17:27:26.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"db19fa854f74e2b54a8420c0269009167b920b04","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-15 23:58:39.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"ed2a84cf8b4e950acff6bab3caad7a4d1eb4a9a2","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-15 23:59:31.000000000","message":"Patch Set 1: Workflow-1\n\nstill need to dot some Is and cross some Ts","accounts_in_message":[],"_revision_number":1},{"id":"7cc5425e26af53cc58d1581b40daa69acfb7b5b1","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-07-16 01:44:16.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttp://docs.openstack.org/infra/manual/developers.html#automated-testing\n\n\n- openstack-tox-cover http://logs.openstack.org/26/670926/1/check/openstack-tox-cover/c3ed1ea/ : FAILURE in 35m 51s\n- openstack-tox-lower-constraints http://logs.openstack.org/26/670926/1/check/openstack-tox-lower-constraints/58dff7f/ : FAILURE in 33m 38s\n- openstack-tox-pep8 http://logs.openstack.org/26/670926/1/check/openstack-tox-pep8/80018e0/ : FAILURE in 4m 42s\n- openstack-tox-py27 http://logs.openstack.org/26/670926/1/check/openstack-tox-py27/aaa26d6/ : FAILURE in 22m 14s\n- openstack-tox-py36 http://logs.openstack.org/26/670926/1/check/openstack-tox-py36/3f761c8/ : FAILURE in 31m 07s\n- openstack-tox-py37 http://logs.openstack.org/26/670926/1/check/openstack-tox-py37/e16ebdb/ : FAILURE in 28m 40s\n- openstack-tox-docs http://logs.openstack.org/26/670926/1/check/openstack-tox-docs/15b26c7/html/ : SUCCESS in 7m 38s\n- tempest-full http://logs.openstack.org/26/670926/1/check/tempest-full/5191909/ : FAILURE in 1h 28m 49s\n- neutron-grenade http://logs.openstack.org/26/670926/1/check/neutron-grenade/1b02418/ : SUCCESS in 1h 03m 54s\n- grenade-py3 http://logs.openstack.org/26/670926/1/check/grenade-py3/ab769c0/ : SUCCESS in 1h 01m 46s\n- tempest-full-py3 http://logs.openstack.org/26/670926/1/check/tempest-full-py3/9519c62/ : SUCCESS in 1h 38m 22s\n- keystone-dsvm-functional http://logs.openstack.org/26/670926/1/check/keystone-dsvm-functional/2d8d954/ : SUCCESS in 34m 49s\n- keystone-dsvm-py3-functional http://logs.openstack.org/26/670926/1/check/keystone-dsvm-py3-functional/1d9f298/ : SUCCESS in 32m 07s\n- keystone-dsvm-functional-federation-opensuse15 http://logs.openstack.org/26/670926/1/check/keystone-dsvm-functional-federation-opensuse15/bf63a22/ : SUCCESS in 33m 43s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 http://logs.openstack.org/26/670926/1/check/keystone-dsvm-py3-functional-federation-opensuse15/623738b/ : SUCCESS in 40m 55s (non-voting)\n- keystoneclient-devstack-functional http://logs.openstack.org/26/670926/1/check/keystoneclient-devstack-functional/e472d22/ : FAILURE in 15m 40s (non-voting)\n- legacy-tempest-dsvm-ldap-domain-specific-driver http://logs.openstack.org/26/670926/1/check/legacy-tempest-dsvm-ldap-domain-specific-driver/177ff50/ : SUCCESS in 1h 39m 24s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"dace22e223a20125bcd0a1675fa63bac6a7453d8","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-16 07:31:01.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"58a8628488766966ae1a0b5940288fe3b1fa2a68","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-07-16 09:18:33.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover http://logs.openstack.org/26/670926/2/check/openstack-tox-cover/9c512e6/cover/ : SUCCESS in 36m 50s\n- openstack-tox-lower-constraints http://logs.openstack.org/26/670926/2/check/openstack-tox-lower-constraints/da901cd/ : SUCCESS in 35m 03s\n- openstack-tox-pep8 http://logs.openstack.org/26/670926/2/check/openstack-tox-pep8/ba76cc2/ : SUCCESS in 5m 05s\n- openstack-tox-py27 http://logs.openstack.org/26/670926/2/check/openstack-tox-py27/c486b1f/ : SUCCESS in 28m 01s\n- openstack-tox-py36 http://logs.openstack.org/26/670926/2/check/openstack-tox-py36/dad9ed1/ : SUCCESS in 35m 27s\n- openstack-tox-py37 http://logs.openstack.org/26/670926/2/check/openstack-tox-py37/2908d35/ : SUCCESS in 36m 33s\n- openstack-tox-docs http://logs.openstack.org/26/670926/2/check/openstack-tox-docs/3de9c79/html/ : SUCCESS in 6m 55s\n- tempest-full http://logs.openstack.org/26/670926/2/check/tempest-full/21edb43/ : SUCCESS in 1h 27m 08s\n- neutron-grenade http://logs.openstack.org/26/670926/2/check/neutron-grenade/a260f6e/ : SUCCESS in 56m 22s\n- grenade-py3 http://logs.openstack.org/26/670926/2/check/grenade-py3/f6ca80b/ : SUCCESS in 1h 04m 03s\n- tempest-full-py3 http://logs.openstack.org/26/670926/2/check/tempest-full-py3/2ea417f/ : SUCCESS in 1h 24m 09s\n- build-openstack-releasenotes http://logs.openstack.org/26/670926/2/check/build-openstack-releasenotes/79a24ad/html/ : SUCCESS in 9m 21s\n- keystone-dsvm-functional http://logs.openstack.org/26/670926/2/check/keystone-dsvm-functional/c3f1d95/ : SUCCESS in 30m 08s\n- keystone-dsvm-py3-functional http://logs.openstack.org/26/670926/2/check/keystone-dsvm-py3-functional/3cbca9c/ : SUCCESS in 38m 36s\n- keystone-dsvm-functional-federation-opensuse15 http://logs.openstack.org/26/670926/2/check/keystone-dsvm-functional-federation-opensuse15/d320281/ : SUCCESS in 39m 34s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 http://logs.openstack.org/26/670926/2/check/keystone-dsvm-py3-functional-federation-opensuse15/cd9107a/ : SUCCESS in 39m 42s (non-voting)\n- keystoneclient-devstack-functional http://logs.openstack.org/26/670926/2/check/keystoneclient-devstack-functional/d009484/ : SUCCESS in 14m 31s (non-voting)\n- legacy-tempest-dsvm-ldap-domain-specific-driver http://logs.openstack.org/26/670926/2/check/legacy-tempest-dsvm-ldap-domain-specific-driver/5dbe38d/ : SUCCESS in 1h 30m 42s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"1fe52b0d28058ae3b4b6ea7da8a785f8f38a962b","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2019-07-16 19:20:36.000000000","message":"Patch Set 2: Code-Review-1\n\n(4 comments)","accounts_in_message":[],"_revision_number":2},{"id":"cf3ecc944928c8284b299becc7961377268c29d7","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-16 21:27:08.000000000","message":"Patch Set 2:\n\n(4 comments)\n\nThanks Colleen for the review. What\u0027s the expectation if [oslo_policy]enforce_scope\u003dFalse versus True?","accounts_in_message":[],"_revision_number":2},{"id":"7297439a56cdc0aad19bb1938fa6941c486081ca","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2019-07-16 22:38:52.000000000","message":"Patch Set 2:\n\n(4 comments)","accounts_in_message":[],"_revision_number":2},{"id":"8d5928bdf7cb01d6f14df0acd8837a4a8984d73a","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-17 00:23:50.000000000","message":"Patch Set 2:\n\n(3 comments)","accounts_in_message":[],"_revision_number":2},{"id":"f99e0ef56ea2f39ed12d73e6a8173c350735d0aa","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-17 00:48:30.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"eb0ec27f167b9597cd2b1db4ca3ab2aa1a81ca88","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2019-07-17 00:57:33.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"1149f96d3a446712de10c08901af498471a1b219","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-07-17 02:46:43.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttp://docs.openstack.org/infra/manual/developers.html#automated-testing\n\n\n- openstack-tox-cover http://logs.openstack.org/26/670926/3/check/openstack-tox-cover/cdd8433/cover/ : SUCCESS in 35m 35s\n- openstack-tox-lower-constraints http://logs.openstack.org/26/670926/3/check/openstack-tox-lower-constraints/89eff21/ : SUCCESS in 39m 00s\n- openstack-tox-pep8 http://logs.openstack.org/26/670926/3/check/openstack-tox-pep8/5cbc7fb/ : SUCCESS in 6m 51s\n- openstack-tox-py27 http://logs.openstack.org/26/670926/3/check/openstack-tox-py27/40bd244/ : TIMED_OUT in 41m 02s\n- openstack-tox-py36 http://logs.openstack.org/26/670926/3/check/openstack-tox-py36/e30c23f/ : SUCCESS in 40m 20s\n- openstack-tox-py37 http://logs.openstack.org/26/670926/3/check/openstack-tox-py37/acaf275/ : TIMED_OUT in 41m 11s\n- openstack-tox-docs http://logs.openstack.org/26/670926/3/check/openstack-tox-docs/cc75c7c/html/ : SUCCESS in 7m 33s\n- tempest-full http://logs.openstack.org/26/670926/3/check/tempest-full/ffd392c/ : SUCCESS in 1h 30m 09s\n- neutron-grenade http://logs.openstack.org/26/670926/3/check/neutron-grenade/659094a/ : SUCCESS in 1h 02m 42s\n- grenade-py3 http://logs.openstack.org/26/670926/3/check/grenade-py3/17ee886/ : SUCCESS in 1h 02m 15s\n- tempest-full-py3 http://logs.openstack.org/26/670926/3/check/tempest-full-py3/76dc928/ : SUCCESS in 1h 27m 42s\n- build-openstack-releasenotes http://logs.openstack.org/26/670926/3/check/build-openstack-releasenotes/d27d582/html/ : SUCCESS in 9m 17s\n- keystone-dsvm-functional http://logs.openstack.org/26/670926/3/check/keystone-dsvm-functional/2ac01ca/ : SUCCESS in 34m 42s\n- keystone-dsvm-py3-functional http://logs.openstack.org/26/670926/3/check/keystone-dsvm-py3-functional/919a71c/ : SUCCESS in 41m 08s\n- keystone-dsvm-functional-federation-opensuse15 http://logs.openstack.org/26/670926/3/check/keystone-dsvm-functional-federation-opensuse15/324c952/ : SUCCESS in 43m 45s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 http://logs.openstack.org/26/670926/3/check/keystone-dsvm-py3-functional-federation-opensuse15/b0efc88/ : SUCCESS in 46m 12s (non-voting)\n- keystoneclient-devstack-functional http://logs.openstack.org/26/670926/3/check/keystoneclient-devstack-functional/f785deb/ : SUCCESS in 17m 16s (non-voting)\n- legacy-tempest-dsvm-ldap-domain-specific-driver http://logs.openstack.org/26/670926/3/check/legacy-tempest-dsvm-ldap-domain-specific-driver/be72a87/ : SUCCESS in 1h 30m 24s (non-voting)","accounts_in_message":[],"_revision_number":3},{"id":"b51023e8567e42204e003bf5ff2a4b114c7bc858","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-17 15:20:05.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"5f877ab4c3a7a55fdb17be675e00a2095ceafdab","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-17 15:20:26.000000000","message":"Patch Set 3: Workflow-1","accounts_in_message":[],"_revision_number":3},{"id":"6176a20caab7939e1c4cf20f3aed96add908826c","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-17 17:25:27.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"85443e8bbce4d78f3fc5fedd19d174422fe82d64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-07-17 19:11:54.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover http://logs.openstack.org/26/670926/4/check/openstack-tox-cover/28bc325/cover/ : SUCCESS in 35m 25s\n- openstack-tox-lower-constraints http://logs.openstack.org/26/670926/4/check/openstack-tox-lower-constraints/0b34d9c/ : SUCCESS in 34m 03s\n- openstack-tox-pep8 http://logs.openstack.org/26/670926/4/check/openstack-tox-pep8/85178e1/ : SUCCESS in 8m 08s\n- openstack-tox-py27 http://logs.openstack.org/26/670926/4/check/openstack-tox-py27/02b25ba/ : SUCCESS in 30m 15s\n- openstack-tox-py36 http://logs.openstack.org/26/670926/4/check/openstack-tox-py36/fa0e1fc/ : SUCCESS in 29m 58s\n- openstack-tox-py37 http://logs.openstack.org/26/670926/4/check/openstack-tox-py37/25d0603/ : SUCCESS in 29m 29s\n- openstack-tox-docs http://logs.openstack.org/26/670926/4/check/openstack-tox-docs/7269465/html/ : SUCCESS in 7m 08s\n- tempest-full http://logs.openstack.org/26/670926/4/check/tempest-full/24b0e38/ : SUCCESS in 1h 38m 01s\n- neutron-grenade http://logs.openstack.org/26/670926/4/check/neutron-grenade/095593c/ : SUCCESS in 50m 46s\n- grenade-py3 http://logs.openstack.org/26/670926/4/check/grenade-py3/621c725/ : SUCCESS in 52m 50s\n- tempest-full-py3 http://logs.openstack.org/26/670926/4/check/tempest-full-py3/75fb884/ : SUCCESS in 1h 27m 41s\n- build-openstack-releasenotes http://logs.openstack.org/26/670926/4/check/build-openstack-releasenotes/d71eb4d/html/ : SUCCESS in 9m 24s\n- keystone-dsvm-functional http://logs.openstack.org/26/670926/4/check/keystone-dsvm-functional/1791866/ : SUCCESS in 30m 32s\n- keystone-dsvm-py3-functional http://logs.openstack.org/26/670926/4/check/keystone-dsvm-py3-functional/5bc67f1/ : SUCCESS in 30m 38s\n- keystone-dsvm-functional-federation-opensuse15 http://logs.openstack.org/26/670926/4/check/keystone-dsvm-functional-federation-opensuse15/a57b3f3/ : SUCCESS in 50m 24s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 http://logs.openstack.org/26/670926/4/check/keystone-dsvm-py3-functional-federation-opensuse15/1c5a9ea/ : SUCCESS in 45m 15s (non-voting)\n- keystoneclient-devstack-functional http://logs.openstack.org/26/670926/4/check/keystoneclient-devstack-functional/1792d1f/ : SUCCESS in 19m 22s (non-voting)\n- legacy-tempest-dsvm-ldap-domain-specific-driver http://logs.openstack.org/26/670926/4/check/legacy-tempest-dsvm-ldap-domain-specific-driver/0f5793c/ : FAILURE in 1h 29m 08s (non-voting)","accounts_in_message":[],"_revision_number":4},{"id":"d9e9f5e2f8051075a3e11a8e22be93f999065015","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2019-07-17 22:00:12.000000000","message":"Patch Set 4: Code-Review-1\n\n(13 comments)","accounts_in_message":[],"_revision_number":4},{"id":"df5d0d902a34a54e5741f22e7aa8e644647a6f50","author":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"date":"2019-07-18 07:05:24.000000000","message":"Patch Set 3:\n\n(3 comments)","accounts_in_message":[],"_revision_number":3},{"id":"d7cd00e428dc18a2b7ae77c3eacef515311b986c","author":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"date":"2019-07-18 07:05:35.000000000","message":"Patch Set 4: Code-Review-1","accounts_in_message":[],"_revision_number":4},{"id":"ef11d3ec8e62c3715ebd04f693dc5a640970026a","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-19 00:21:40.000000000","message":"Patch Set 4:\n\n(15 comments)","accounts_in_message":[],"_revision_number":4},{"id":"29e41627bf7660c6134366a5ce614110b02b04ab","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-19 00:24:20.000000000","message":"Patch Set 3:\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"bba0ebb512135b19d8fb9caa0c3580db90353cff","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-19 00:32:34.000000000","message":"Uploaded patch set 5.","accounts_in_message":[],"_revision_number":5},{"id":"9e05b17196ee13753392e626af88d305e762d8a4","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-07-19 02:17:46.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover http://logs.openstack.org/26/670926/5/check/openstack-tox-cover/317d4db/cover/ : SUCCESS in 35m 06s\n- openstack-tox-lower-constraints http://logs.openstack.org/26/670926/5/check/openstack-tox-lower-constraints/9b1c0e3/ : SUCCESS in 30m 15s\n- openstack-tox-pep8 http://logs.openstack.org/26/670926/5/check/openstack-tox-pep8/43967ad/ : SUCCESS in 4m 56s\n- openstack-tox-py27 http://logs.openstack.org/26/670926/5/check/openstack-tox-py27/93aed7b/ : SUCCESS in 28m 16s\n- openstack-tox-py36 http://logs.openstack.org/26/670926/5/check/openstack-tox-py36/0b3c959/ : SUCCESS in 28m 08s\n- openstack-tox-py37 http://logs.openstack.org/26/670926/5/check/openstack-tox-py37/c100c9f/ : SUCCESS in 27m 56s\n- openstack-tox-docs http://logs.openstack.org/26/670926/5/check/openstack-tox-docs/8db167e/html/ : SUCCESS in 7m 07s\n- tempest-full http://logs.openstack.org/26/670926/5/check/tempest-full/d74750a/ : SUCCESS in 1h 42m 29s\n- neutron-grenade http://logs.openstack.org/26/670926/5/check/neutron-grenade/1bd0a1b/ : SUCCESS in 47m 56s\n- grenade-py3 http://logs.openstack.org/26/670926/5/check/grenade-py3/dc9aebe/ : SUCCESS in 1h 06m 03s\n- tempest-full-py3 http://logs.openstack.org/26/670926/5/check/tempest-full-py3/3e81b11/ : SUCCESS in 1h 14m 42s\n- build-openstack-releasenotes http://logs.openstack.org/26/670926/5/check/build-openstack-releasenotes/948424d/html/ : SUCCESS in 12m 05s\n- keystone-dsvm-functional http://logs.openstack.org/26/670926/5/check/keystone-dsvm-functional/77003d2/ : SUCCESS in 29m 32s\n- keystone-dsvm-py3-functional http://logs.openstack.org/26/670926/5/check/keystone-dsvm-py3-functional/f6e83cb/ : SUCCESS in 32m 21s\n- keystone-dsvm-functional-federation-opensuse15 http://logs.openstack.org/26/670926/5/check/keystone-dsvm-functional-federation-opensuse15/36bd6ff/ : SUCCESS in 32m 28s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 http://logs.openstack.org/26/670926/5/check/keystone-dsvm-py3-functional-federation-opensuse15/3044e19/ : SUCCESS in 33m 29s (non-voting)\n- keystoneclient-devstack-functional http://logs.openstack.org/26/670926/5/check/keystoneclient-devstack-functional/deaf84c/ : SUCCESS in 16m 06s (non-voting)\n- legacy-tempest-dsvm-ldap-domain-specific-driver http://logs.openstack.org/26/670926/5/check/legacy-tempest-dsvm-ldap-domain-specific-driver/138104a/ : SUCCESS in 1h 16m 05s (non-voting)","accounts_in_message":[],"_revision_number":5},{"id":"10f968cc3006b4c05930faa05fe2834621735546","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2019-07-19 17:20:54.000000000","message":"Patch Set 4:\n\n(3 comments)","accounts_in_message":[],"_revision_number":4},{"id":"ba13cdfbff5a12828062dcdb2a999827b5e5a7b3","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-20 00:52:49.000000000","message":"Patch Set 4:\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"0508616397d7dbc0b133e2e24f2c2c1c6d1d89cb","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-20 00:53:26.000000000","message":"Uploaded patch set 6.","accounts_in_message":[],"_revision_number":6},{"id":"6465cef59e1d571d0b3398ccee474f6784cb806b","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-07-20 02:56:20.000000000","message":"Patch Set 6: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover http://logs.openstack.org/26/670926/6/check/openstack-tox-cover/6b68036/cover/ : SUCCESS in 34m 52s\n- openstack-tox-lower-constraints http://logs.openstack.org/26/670926/6/check/openstack-tox-lower-constraints/9fdcc27/ : SUCCESS in 28m 58s\n- openstack-tox-pep8 http://logs.openstack.org/26/670926/6/check/openstack-tox-pep8/a8edd3a/ : SUCCESS in 5m 29s\n- openstack-tox-py27 http://logs.openstack.org/26/670926/6/check/openstack-tox-py27/ca641f9/ : SUCCESS in 29m 25s\n- openstack-tox-py36 http://logs.openstack.org/26/670926/6/check/openstack-tox-py36/9c4e4ba/ : SUCCESS in 28m 20s\n- openstack-tox-py37 http://logs.openstack.org/26/670926/6/check/openstack-tox-py37/f0b946f/ : SUCCESS in 30m 06s\n- openstack-tox-docs http://logs.openstack.org/26/670926/6/check/openstack-tox-docs/ff40305/html/ : SUCCESS in 7m 31s\n- tempest-full http://logs.openstack.org/26/670926/6/check/tempest-full/b0c9c5c/ : SUCCESS in 1h 55m 37s\n- neutron-grenade http://logs.openstack.org/26/670926/6/check/neutron-grenade/97542e4/ : SUCCESS in 57m 38s\n- grenade-py3 http://logs.openstack.org/26/670926/6/check/grenade-py3/167174f/ : SUCCESS in 59m 33s\n- tempest-full-py3 http://logs.openstack.org/26/670926/6/check/tempest-full-py3/4918f28/ : SUCCESS in 1h 29m 17s\n- build-openstack-releasenotes http://logs.openstack.org/26/670926/6/check/build-openstack-releasenotes/05bf9f6/html/ : SUCCESS in 11m 17s\n- keystone-dsvm-functional http://logs.openstack.org/26/670926/6/check/keystone-dsvm-functional/f5d8944/ : SUCCESS in 30m 52s\n- keystone-dsvm-py3-functional http://logs.openstack.org/26/670926/6/check/keystone-dsvm-py3-functional/3079a43/ : SUCCESS in 34m 35s\n- keystone-dsvm-functional-federation-opensuse15 http://logs.openstack.org/26/670926/6/check/keystone-dsvm-functional-federation-opensuse15/1113b6e/ : SUCCESS in 42m 19s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 http://logs.openstack.org/26/670926/6/check/keystone-dsvm-py3-functional-federation-opensuse15/dc0f679/ : SUCCESS in 40m 03s (non-voting)\n- keystoneclient-devstack-functional http://logs.openstack.org/26/670926/6/check/keystoneclient-devstack-functional/7ec00ab/ : SUCCESS in 15m 44s (non-voting)\n- legacy-tempest-dsvm-ldap-domain-specific-driver http://logs.openstack.org/26/670926/6/check/legacy-tempest-dsvm-ldap-domain-specific-driver/d771512/ : SUCCESS in 1h 34m 19s (non-voting)","accounts_in_message":[],"_revision_number":6},{"id":"e4370e839e35f524ba317855a08440f57e3ad52d","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2019-07-24 21:35:47.000000000","message":"Patch Set 6: Code-Review+1\n\n(1 comment)\n\nOne question inline, otherwise this lgtm","accounts_in_message":[],"_revision_number":6},{"id":"e58a63534df2a84a995c16cbc8fa3a9461558447","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2019-07-24 22:04:49.000000000","message":"Patch Set 6:\n\n(1 comment)","accounts_in_message":[],"_revision_number":6},{"id":"64055d1598c815befd6e1654c793f13fe4b2dfcc","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2019-07-24 22:11:55.000000000","message":"Patch Set 6: Code-Review+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":6},{"id":"05f39a84a331864f2401e80fbc6aab880b3d1e65","author":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"date":"2019-07-25 06:04:52.000000000","message":"Patch Set 6: Code-Review+1\n\nlooks good.","accounts_in_message":[],"_revision_number":6},{"id":"0b4fc32593d3c25ade50d6979e0dbde08e1627eb","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2019-07-25 15:16:39.000000000","message":"Patch Set 6: Code-Review+2 Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":6},{"id":"c042be625214ed23b7fb04bbdc874d03ee6ef157","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-07-25 15:17:03.000000000","message":"Patch Set 6: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":6},{"id":"2d059dc40ae5f584066216ffc245525b7ce66b4a","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-07-25 17:27:26.000000000","message":"Patch Set 6: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-lower-constraints http://logs.openstack.org/26/670926/6/gate/openstack-tox-lower-constraints/b2527e3/ : SUCCESS in 31m 59s\n- openstack-tox-pep8 http://logs.openstack.org/26/670926/6/gate/openstack-tox-pep8/efd8d51/ : SUCCESS in 7m 49s\n- openstack-tox-py27 http://logs.openstack.org/26/670926/6/gate/openstack-tox-py27/e4d9c2c/ : SUCCESS in 30m 23s\n- openstack-tox-py36 http://logs.openstack.org/26/670926/6/gate/openstack-tox-py36/e4573a6/ : SUCCESS in 29m 00s\n- openstack-tox-py37 http://logs.openstack.org/26/670926/6/gate/openstack-tox-py37/afe7d6d/ : SUCCESS in 29m 12s\n- openstack-tox-docs http://logs.openstack.org/26/670926/6/gate/openstack-tox-docs/52862b0/html/ : SUCCESS in 9m 07s\n- tempest-full http://logs.openstack.org/26/670926/6/gate/tempest-full/e75dd9a/ : SUCCESS in 1h 42m 46s\n- neutron-grenade http://logs.openstack.org/26/670926/6/gate/neutron-grenade/1ac262b/ : SUCCESS in 1h 03m 38s\n- grenade-py3 http://logs.openstack.org/26/670926/6/gate/grenade-py3/03a868d/ : SUCCESS in 57m 26s\n- tempest-full-py3 http://logs.openstack.org/26/670926/6/gate/tempest-full-py3/7f0dafb/ : SUCCESS in 1h 20m 21s\n- build-openstack-releasenotes http://logs.openstack.org/26/670926/6/gate/build-openstack-releasenotes/a1673c2/html/ : SUCCESS in 10m 50s\n- keystone-dsvm-functional http://logs.openstack.org/26/670926/6/gate/keystone-dsvm-functional/1164983/ : SUCCESS in 32m 05s\n- keystone-dsvm-py3-functional http://logs.openstack.org/26/670926/6/gate/keystone-dsvm-py3-functional/f13f06e/ : SUCCESS in 34m 45s","accounts_in_message":[],"_revision_number":6},{"id":"5f3bce9b72e7ca0d03cfe012e54d6eb72ae38568","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-07-25 17:27:26.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":6}],"current_revision_number":6,"current_revision":"52da4d0e129048d1b808bdde07364cde698cf475","revisions":{"7b4edad5692bdcc76fa040c58201b2b7148df8d9":{"kind":"REWORK","_number":1,"created":"2019-07-15 23:58:39.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/26/670926/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/26/670926/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/26/670926/1"}}},"commit":{"parents":[{"commit":"e9ee189b4392bbd9ff4324cb194ee9e1e0818586","subject":"Fix keystone document","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e9ee189b4392bbd9ff4324cb194ee9e1e0818586"}]}],"author":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-15 23:57:21.000000000","tz":-420},"committer":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-15 23:57:21.000000000","tz":-420},"subject":"implement system scope for application credential","message":"implement system scope for application credential\n\nChange-Id: I26ee11571b6d0f700a5fe3a62ad2e8fc7f5316fe\nCloses-Bug: 1818725\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/7b4edad5692bdcc76fa040c58201b2b7148df8d9"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/7b4edad5692bdcc76fa040c58201b2b7148df8d9"}]},"branch":"refs/heads/master"},"b92060e9f93fb971d1b621836d1ff64d51080765":{"kind":"REWORK","_number":2,"created":"2019-07-16 07:31:01.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/26/670926/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/26/670926/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/26/670926/2"}}},"commit":{"parents":[{"commit":"e9ee189b4392bbd9ff4324cb194ee9e1e0818586","subject":"Fix keystone document","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e9ee189b4392bbd9ff4324cb194ee9e1e0818586"}]}],"author":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-15 23:57:21.000000000","tz":-420},"committer":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-16 07:30:47.000000000","tz":-420},"subject":"implement system scope for application credential","message":"implement system scope for application credential\n\nImplement system scopes, namely \u0027admin\u0027, \u0027reader\u0027, and \u0027member\u0027 for\nthe application credential API. Thus, making it consistent with other\nsystem-scoped policy definitions.\n\nFor the application credential API, the follow policies will be enforced:\n\n- system admin can fetch, list, lookup, and delete user\u0027s application\n  credentials.\n- system member and reader can only fetch, list, and lookup user\u0027s application\n  credentials. Deleting a user\u0027s application credential other their own is\n  strictly prohibitted.\n- domain and project admins can no longer touch user\u0027s application credentials\n  other their own.\n- create an application credential can only be done by the owner. No one else\n  can create an application credential on behalf of another user.\n\nTest cases are added to guard the above policy changes.\n\nChange-Id: I26ee11571b6d0f700a5fe3a62ad2e8fc7f5316fe\nCloses-Bug: 1818725\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b92060e9f93fb971d1b621836d1ff64d51080765"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b92060e9f93fb971d1b621836d1ff64d51080765"}]},"branch":"refs/heads/master"},"49a5a5f2349cfc4f8572cff095ff9d76240be9ef":{"kind":"REWORK","_number":3,"created":"2019-07-17 00:48:30.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/26/670926/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/26/670926/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/26/670926/3"}}},"commit":{"parents":[{"commit":"e9ee189b4392bbd9ff4324cb194ee9e1e0818586","subject":"Fix keystone document","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e9ee189b4392bbd9ff4324cb194ee9e1e0818586"}]}],"author":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-15 23:57:21.000000000","tz":-420},"committer":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-17 00:48:18.000000000","tz":-420},"subject":"implement system scope for application credential","message":"implement system scope for application credential\n\nImplement system scopes, namely \u0027admin\u0027, \u0027reader\u0027, and \u0027member\u0027 for\nthe application credential API. Thus, making it consistent with other\nsystem-scoped policy definitions.\n\nFor the application credential API, the follow policies will be enforced:\n\n- system admin can fetch, list, lookup, and delete user\u0027s application\n  credentials.\n- system member and reader can only fetch, list, and lookup user\u0027s application\n  credentials. Deleting a user\u0027s application credential other their own is\n  strictly prohibitted.\n- domain and project admins can no longer touch user\u0027s application credentials\n  other their own.\n- create an application credential can only be done by the owner. No one else\n  can create an application credential on behalf of another user.\n\nTest cases are added to guard the above policy changes.\n\nChange-Id: I26ee11571b6d0f700a5fe3a62ad2e8fc7f5316fe\nCloses-Bug: 1818725\nCloses-Bug: 1750615\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/49a5a5f2349cfc4f8572cff095ff9d76240be9ef"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/49a5a5f2349cfc4f8572cff095ff9d76240be9ef"}]},"branch":"refs/heads/master"},"ca73912fb93d30eae8b4bde4a21b33e0fca52fc1":{"kind":"REWORK","_number":4,"created":"2019-07-17 17:25:27.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/26/670926/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/26/670926/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/26/670926/4"}}},"commit":{"parents":[{"commit":"e9ee189b4392bbd9ff4324cb194ee9e1e0818586","subject":"Fix keystone document","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e9ee189b4392bbd9ff4324cb194ee9e1e0818586"}]}],"author":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-15 23:57:21.000000000","tz":-420},"committer":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-17 17:24:30.000000000","tz":-420},"subject":"implement system scope for application credential","message":"implement system scope for application credential\n\nImplement system scopes, namely \u0027admin\u0027, \u0027reader\u0027, and \u0027member\u0027 for\nthe application credential API. Thus, making it consistent with other\nsystem-scoped policy definitions.\n\nFor the application credential API, the follow policies will be enforced:\n\n- system admin can fetch, list, lookup, and delete user\u0027s application\n  credentials.\n- system member and reader can only fetch, list, and lookup user\u0027s application\n  credentials. Deleting a user\u0027s application credential other their own is\n  strictly prohibitted.\n- domain and project admins can no longer touch user\u0027s application credentials\n  other their own.\n- create an application credential can only be done by the owner. No one else\n  can create an application credential on behalf of another user.\n\nTest cases are added to guard the above policy changes.\n\nChange-Id: I26ee11571b6d0f700a5fe3a62ad2e8fc7f5316fe\nCloses-Bug: 1818725\nCloses-Bug: 1750615\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/ca73912fb93d30eae8b4bde4a21b33e0fca52fc1"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/ca73912fb93d30eae8b4bde4a21b33e0fca52fc1"}]},"branch":"refs/heads/master"},"a6eee5bf28917250c2a89507d7f48a8d4cd80d1d":{"kind":"REWORK","_number":5,"created":"2019-07-19 00:32:34.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/26/670926/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/26/670926/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/26/670926/5"}}},"commit":{"parents":[{"commit":"e9ee189b4392bbd9ff4324cb194ee9e1e0818586","subject":"Fix keystone document","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e9ee189b4392bbd9ff4324cb194ee9e1e0818586"}]}],"author":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-15 23:57:21.000000000","tz":-420},"committer":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-19 00:32:26.000000000","tz":-420},"subject":"implement system scope for application credential","message":"implement system scope for application credential\n\nImplement system scopes, namely \u0027admin\u0027, \u0027reader\u0027, and \u0027member\u0027 for\nthe application credential API. Thus, making it consistent with other\nsystem-scoped policy definitions.\n\nFor the application credential API, the follow policies will be enforced:\n\n- system admin can fetch, list, lookup, and delete user\u0027s application\n  credentials.\n- system member and reader can only fetch, list, and lookup user\u0027s application\n  credentials. Deleting a user\u0027s application credential other their own is\n  strictly prohibitted.\n- domain and project admins can no longer touch user\u0027s application credentials\n  other their own.\n- domain and project readers cannot touch user\u0027s application credentials\n  other their own.\n- domain and project members cannot touch user\u0027s application credentials\n  other their own.\n- create an application credential can only be done by the owner. No one else\n  can create an application credential on behalf of another user.\n\nTest cases are added to guard the above policy changes.\n\nChange-Id: I26ee11571b6d0f700a5fe3a62ad2e8fc7f5316fe\nCloses-Bug: 1818725\nCloses-Bug: 1750615\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/a6eee5bf28917250c2a89507d7f48a8d4cd80d1d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/a6eee5bf28917250c2a89507d7f48a8d4cd80d1d"}]},"branch":"refs/heads/master"},"52da4d0e129048d1b808bdde07364cde698cf475":{"kind":"REWORK","_number":6,"created":"2019-07-20 00:53:26.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/26/670926/6","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/26/670926/6","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/26/670926/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/26/670926/6"}}},"commit":{"parents":[{"commit":"e9ee189b4392bbd9ff4324cb194ee9e1e0818586","subject":"Fix keystone document","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e9ee189b4392bbd9ff4324cb194ee9e1e0818586"}]}],"author":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-15 23:57:21.000000000","tz":-420},"committer":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2019-07-20 00:53:16.000000000","tz":-420},"subject":"implement system scope for application credential","message":"implement system scope for application credential\n\nImplement system scopes, namely \u0027admin\u0027, \u0027reader\u0027, and \u0027member\u0027 for\nthe application credential API. Thus, making it consistent with other\nsystem-scoped policy definitions.\n\nFor the application credential API, the follow policies will be enforced:\n\n- system admin can fetch, list, lookup, and delete user\u0027s application\n  credentials.\n- system member and reader can only fetch, list, and lookup user\u0027s application\n  credentials. Deleting a user\u0027s application credential other their own is\n  strictly prohibitted.\n- domain and project admins can no longer touch user\u0027s application credentials\n  other their own.\n- domain and project readers cannot touch user\u0027s application credentials\n  other their own.\n- domain and project members cannot touch user\u0027s application credentials\n  other their own.\n- create an application credential can only be done by the owner. No one else\n  can create an application credential on behalf of another user.\n\nTest cases are added to guard the above policy changes.\n\nChange-Id: I26ee11571b6d0f700a5fe3a62ad2e8fc7f5316fe\nCloses-Bug: 1818725\nCloses-Bug: 1750615\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/52da4d0e129048d1b808bdde07364cde698cf475"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/52da4d0e129048d1b808bdde07364cde698cf475"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}