)]}'
{"doc/source/admin/tokens-overview.rst":[{"author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"change_message_id":"ae34d02a3a4f68540f24b3b3e67b8281f93f1221","unresolved":false,"context_lines":[{"line_number":54,"context_line":"Domain-scoped tokens"},{"line_number":55,"context_line":"~~~~~~~~~~~~~~~~~~~~"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"Domains are containers for projects, users, and groups. A domain-scoped token"},{"line_number":58,"context_line":"expresses your authorization to operate on the contents of a domain or the"},{"line_number":59,"context_line":"domain itself."},{"line_number":60,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_12da94e8","line":57,"updated":"2019-10-04 17:32:42.000000000","message":"I like to use the word \"namespace\" when describing domains.","commit_id":"10427eab43585429f5908866e8c84eb5f73b15f4"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"624e7567ee1a2db09ca609aab8a0fc16c1dc80a5","unresolved":false,"context_lines":[{"line_number":54,"context_line":"Domain-scoped tokens"},{"line_number":55,"context_line":"~~~~~~~~~~~~~~~~~~~~"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"Domains are containers for projects, users, and groups. A domain-scoped token"},{"line_number":58,"context_line":"expresses your authorization to operate on the contents of a domain or the"},{"line_number":59,"context_line":"domain itself."},{"line_number":60,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_fb1b13c7","line":57,"in_reply_to":"3fa7e38b_12da94e8","updated":"2019-10-04 19:40:58.000000000","message":"Done","commit_id":"10427eab43585429f5908866e8c84eb5f73b15f4"},{"author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"change_message_id":"ae34d02a3a4f68540f24b3b3e67b8281f93f1221","unresolved":false,"context_lines":[{"line_number":58,"context_line":"expresses your authorization to operate on the contents of a domain or the"},{"line_number":59,"context_line":"domain itself."},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"While some OpenStack services are still adopting the domain concept, domains"},{"line_number":62,"context_line":"are fully supported in keystone. This means users with authorization on a"},{"line_number":63,"context_line":"domain have the ability to manage things within the domain. For example, a"},{"line_number":64,"context_line":"domain administrator can create new users and projects within that domain."}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_b2c94026","line":61,"range":{"start_line":61,"start_character":0,"end_line":61,"end_character":67},"updated":"2019-10-04 17:32:42.000000000","message":"I think this is a little misleading. Most projects won\u0027t ever acknowledge domains - they don\u0027t need to. Domains are really a keystone thing, you wouldn\u0027t ever put anything besides projects, users, and groups (and roles and a few other keystoney things I guess) into one.","commit_id":"10427eab43585429f5908866e8c84eb5f73b15f4"},{"author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"change_message_id":"f4e6ea235df0ed745a4604f08f01713b76120c0a","unresolved":false,"context_lines":[{"line_number":58,"context_line":"expresses your authorization to operate on the contents of a domain or the"},{"line_number":59,"context_line":"domain itself."},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"While some OpenStack services are still adopting the domain concept, domains"},{"line_number":62,"context_line":"are fully supported in keystone. This means users with authorization on a"},{"line_number":63,"context_line":"domain have the ability to manage things within the domain. For example, a"},{"line_number":64,"context_line":"domain administrator can create new users and projects within that domain."}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_c18c2837","line":61,"range":{"start_line":61,"start_character":0,"end_line":61,"end_character":67},"in_reply_to":"3fa7e38b_1b6cef34","updated":"2019-10-04 22:28:28.000000000","message":"Okay fair enough","commit_id":"10427eab43585429f5908866e8c84eb5f73b15f4"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"624e7567ee1a2db09ca609aab8a0fc16c1dc80a5","unresolved":false,"context_lines":[{"line_number":58,"context_line":"expresses your authorization to operate on the contents of a domain or the"},{"line_number":59,"context_line":"domain itself."},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"While some OpenStack services are still adopting the domain concept, domains"},{"line_number":62,"context_line":"are fully supported in keystone. This means users with authorization on a"},{"line_number":63,"context_line":"domain have the ability to manage things within the domain. For example, a"},{"line_number":64,"context_line":"domain administrator can create new users and projects within that domain."}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_1b6cef34","line":61,"range":{"start_line":61,"start_character":0,"end_line":61,"end_character":67},"in_reply_to":"3fa7e38b_b2c94026","updated":"2019-10-04 19:40:58.000000000","message":"I agree that most services won\u0027t use domains to put resources in, but what about users that call the /v2/servers API with a domain-scoped token?\n\nIs the right response a list of all instances owned by all projects within a domain?","commit_id":"10427eab43585429f5908866e8c84eb5f73b15f4"},{"author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"change_message_id":"ae34d02a3a4f68540f24b3b3e67b8281f93f1221","unresolved":false,"context_lines":[{"line_number":75,"context_line":"Some OpenStack APIs fit nicely within the concept of projects (e.g.,"},{"line_number":76,"context_line":"creating an instance) or domains (e.g., creating a new user), but there are also"},{"line_number":77,"context_line":"APIs that affect the entire deployment system (e.g. modifying endpoints,"},{"line_number":78,"context_line":"service management, or listing information about hypervisors). These options"},{"line_number":79,"context_line":"are typically reserved for operators and require system-scoped tokens, which"},{"line_number":80,"context_line":"represents the role assignments a user has to operate on the deployment as a"},{"line_number":81,"context_line":"whole. The term *system* refers to the deployment system, which is a collection"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_32feb038","line":78,"range":{"start_line":78,"start_character":69,"end_line":78,"end_character":76},"updated":"2019-10-04 17:32:42.000000000","message":"operations, actions","commit_id":"10427eab43585429f5908866e8c84eb5f73b15f4"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"624e7567ee1a2db09ca609aab8a0fc16c1dc80a5","unresolved":false,"context_lines":[{"line_number":75,"context_line":"Some OpenStack APIs fit nicely within the concept of projects (e.g.,"},{"line_number":76,"context_line":"creating an instance) or domains (e.g., creating a new user), but there are also"},{"line_number":77,"context_line":"APIs that affect the entire deployment system (e.g. modifying endpoints,"},{"line_number":78,"context_line":"service management, or listing information about hypervisors). These options"},{"line_number":79,"context_line":"are typically reserved for operators and require system-scoped tokens, which"},{"line_number":80,"context_line":"represents the role assignments a user has to operate on the deployment as a"},{"line_number":81,"context_line":"whole. The term *system* refers to the deployment system, which is a collection"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_3b676b54","line":78,"range":{"start_line":78,"start_character":69,"end_line":78,"end_character":76},"in_reply_to":"3fa7e38b_32feb038","updated":"2019-10-04 19:40:58.000000000","message":"Done","commit_id":"10427eab43585429f5908866e8c84eb5f73b15f4"}]}