)]}'
{"id":"openstack%2Fkeystone~741785","triplet_id":"openstack%2Fkeystone~master~Iea14bd0b417ce0c12ef13fac785be6fdcf43acbb","project":"openstack/keystone","branch":"master","topic":"bug/1888029","hashtags":[],"change_id":"Iea14bd0b417ce0c12ef13fac785be6fdcf43acbb","subject":"Support for deprovisioning federated assignments","status":"ABANDONED","created":"2020-07-17 23:08:01.000000000","updated":"2022-01-21 21:00:42.000000000","total_comment_count":4,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"6112aba5ebd75b462b4622db5b304968d0872fca","_number":741785,"virtual_id_number":741785,"owner":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"actions":{},"labels":{"Verified":{"disliked":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"date":"2020-07-25 14:36:02.000000000","_account_id":28356,"name":"Rafael Weingartner","email":"rafael@apache.org","username":"rafaelweingartner"},{"tag":"autogenerated:zuul:check","value":-1,"date":"2020-07-18 03:13:23.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":-1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":28356,"name":"Rafael Weingartner","email":"rafael@apache.org","username":"rafaelweingartner"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":28356,"name":"Rafael Weingartner","email":"rafael@apache.org","username":"rafaelweingartner"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":28356,"name":"Rafael Weingartner","email":"rafael@apache.org","username":"rafaelweingartner"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-07-18 03:13:23.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2020-07-25 14:36:02.000000000","updated_by":{"_account_id":28356,"name":"Rafael Weingartner","email":"rafael@apache.org","username":"rafaelweingartner"},"reviewer":{"_account_id":28356,"name":"Rafael Weingartner","email":"rafael@apache.org","username":"rafaelweingartner"},"state":"REVIEWER"}],"messages":[{"id":"4fdaeb77dabd1f478d84f0cd32456e3adc4afa92","author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"date":"2020-07-17 23:08:01.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"15b54e106d95bbd523cc74d7cc995788ec47b1a4","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-07-18 03:13:23.000000000","message":"Patch Set 1: Verified-1\n\n(4 comments)\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/de429ae48c5044bf8f52014703961740 : SUCCESS in 14m 17s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/7db5e49854b747e3bf49ccb30504525b : SUCCESS in 36m 13s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4591eba6aed548519df689ff17daf21c : FAILURE in 6m 42s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/e0eb698f4e544b17b26fce5fa707eff8 : SUCCESS in 20m 00s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/72c203e5dc7449a9946779988eebad5d : SUCCESS in 13m 34s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1abb4fff78b94e4cb973ff52e7f304b2 : SUCCESS in 12m 29s\n- grenade https://zuul.opendev.org/t/openstack/build/8510e498c7694a5294420aa3df457bf4 : SUCCESS in 1h 04m 21s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/9902f9f5783a4b9d840a25534ae24a06 : SUCCESS in 1h 25m 11s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/88ec9cf0fb0045dc9c6f0862783a7c4e : SUCCESS in 6m 30s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/8b8f43a4e6b1416e838c45739a6a076a : SUCCESS in 32m 23s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/7e56e849c6b74453a182d972555f4846 : FAILURE in 26m 31s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/bfee35d3113943f2b56d112c91041b14 : FAILURE in 31m 37s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/0390c068dec6495c91b673c81df5f8d0 : SUCCESS in 11m 06s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/8e9c0d3ee92e477e9caf930601da984b : SUCCESS in 40m 17s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/292b92e534f24f52a38dce3e770a41c3 : SUCCESS in 55m 01s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/a101634911224f199f0a3511d36966e4 : SUCCESS in 38m 58s","accounts_in_message":[],"_revision_number":1},{"id":"eb25ab0b72fd6671f3dd57cc65331f0c207125f1","author":{"_account_id":28356,"name":"Rafael Weingartner","email":"rafael@apache.org","username":"rafaelweingartner"},"date":"2020-07-25 14:36:02.000000000","message":"Patch Set 1:\n\nJason, this is something that I am also addressing here:https://review.opendev.org/#/c/742235/\n\nWhat if we combined the work we are doing?","accounts_in_message":[],"_revision_number":1},{"id":"6112aba5ebd75b462b4622db5b304968d0872fca","tag":"autogenerated:gerrit:abandon","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2022-01-21 21:00:42.000000000","message":"Abandoned\n\nAbandoning since there hasn\u0027t been any recent activity, if anyone wants to continue this work, please feel free to restore this or create a new change.","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"68e455fd21b79d337d7fb626b4d866c7c1fb5a16","revisions":{"68e455fd21b79d337d7fb626b4d866c7c1fb5a16":{"kind":"REWORK","_number":1,"created":"2020-07-17 23:08:01.000000000","uploader":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"ref":"refs/changes/85/741785/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/85/741785/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/85/741785/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/85/741785/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/85/741785/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/85/741785/1"}}},"commit":{"parents":[{"commit":"dc68ee48160e8ad9b637f3d91b18a42dbfdf012b","subject":"Merge \"Support regexes in whitelists/blacklists\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/dc68ee48160e8ad9b637f3d91b18a42dbfdf012b"}]}],"author":{"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","date":"2020-07-17 22:46:34.000000000","tz":-300},"committer":{"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","date":"2020-07-17 23:07:47.000000000","tz":-300},"subject":"Support for deprovisioning federated assignments","message":"Support for deprovisioning federated assignments\n\nDeployments that use federation mappings containing a \"projects\" rule\nwill automatically provision projects and role assignments for the\nfederated user within the federated IdP domain. However, users would\nnever lose these assignments, even if the federated IdP\u0027s representation\nof the user\u0027s groups/roles changed--auto-provisioned assignments are\nonly additive.\n\nThis commit adds a new ``remove_dangling_assignments`` configuration\noption, which defaults to ``False``. When set to ``True``, an incoming\nuser\u0027s assignments will be checked against the assignments returned by\nthe mapping rules. Any assignments that exist within the federated\ndomain for the user which are NOT returned by the mapping rules will be\nremoved. This does not affect any assignments on other domains.\n\nChange-Id: Iea14bd0b417ce0c12ef13fac785be6fdcf43acbb\nCloses-Bug: #1888029\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/68e455fd21b79d337d7fb626b4d866c7c1fb5a16"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/68e455fd21b79d337d7fb626b4d866c7c1fb5a16"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}