)]}'
{"id":"openstack%2Fkeystone~760972","triplet_id":"openstack%2Fkeystone~master~I903d20fa41270499ca1c39d296120dd97cef5405","project":"openstack/keystone","branch":"master","topic":"bug/1901207","hashtags":[],"change_id":"I903d20fa41270499ca1c39d296120dd97cef5405","subject":"Use app cred user ID in policy enforcement","status":"MERGED","created":"2020-11-02 17:30:44.000000000","updated":"2021-01-11 00:12:50.000000000","submitted":"2021-01-11 00:11:23.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":5,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"760972-bug/1901207","meta_rev_id":"160a1759b9709f42c3afb8b08461a61993c17658","_number":760972,"virtual_id_number":760972,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"value":0,"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2021-01-11 00:11:22.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"all":[{"value":2,"date":"2020-11-16 23:17:20.000000000","_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"value":0,"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":2,"date":"2021-01-04 21:43:16.000000000","_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"all":[{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"value":0,"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":1,"date":"2021-01-04 21:43:16.000000000","_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"}],"REVIEWER":[{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-11-02 17:30:44.000000000","updated_by":{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},"reviewer":{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},"state":"REVIEWER"},{"updated":"2020-11-11 21:54:42.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2020-11-16 23:17:20.000000000","updated_by":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"reviewer":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"state":"REVIEWER"},{"updated":"2021-01-04 21:43:16.000000000","updated_by":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"reviewer":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"state":"REVIEWER"},{"updated":"2021-01-05 16:54:14.000000000","updated_by":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"reviewer":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"state":"CC"}],"messages":[{"id":"0d421e0ef9ea9611cc595e1a5d62c7bab02af15e","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-02 17:30:44.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"3428bc8f861d61c384fa537fda440b222e7f97d9","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-02 17:33:27.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"e3fad34f1e555964b97652e95d05ec7aef39bc1e","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-02 17:34:22.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"08422a6f7b2ca8b7e3e8cd4f5bec52ce80e9c426","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-03 02:09:58.000000000","message":"Patch Set 1: Verified-1\n\n(3 comments)\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/5eadcbf9fd3f443f83abed29deb11297 : FAILURE in 18m 05s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/0bb1a3df5c1f445bb562f7f0ddb0cf73 : FAILURE in 23m 46s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c1b85ca7979840a5af11ecf07f5924f0 : FAILURE in 5m 42s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/08f9dec08f6647f1b553d07905f92a1c : TIMED_OUT in 41m 04s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/6c4e3c4b63a44bfba4da3dc9c3aeaa7f : FAILURE in 13m 10s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/ed62213327f24ba8a1e09c008f557191 : SUCCESS in 13m 02s\n- grenade https://zuul.opendev.org/t/openstack/build/f84e7af17b61410bad582d378530ef2a : SUCCESS in 1h 04m 00s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/40e58d154ebc4dbd8662584b0f54fbb4 : SUCCESS in 1h 20m 42s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/8a851e88cf1346bb9c2c3e093c07dc2a : FAILURE in 7m 34s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/23ce6393f97647989b5a0c20f7d96c4e : SUCCESS in 38m 35s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/310f71b331874b4099a6f3a8c95eb8a1 : SUCCESS in 32m 12s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/e8c6f4866c874895b12df3c8dbb8c027 : SUCCESS in 31m 44s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/be851fd5ebff4a66b264532e4d0081af : SUCCESS in 18m 15s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/12738efc6dc5423497cca9819328882c : FAILURE in 18m 41s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/5c8826bcad324720985f3c0446f99fac : SUCCESS in 1h 01m 36s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/9fcf1cb1d39245b6b361eefeaee4ab65 : SUCCESS in 37m 01s","accounts_in_message":[],"_revision_number":1},{"id":"62cd49e6fe27e71fe60ea69e473632a871a091be","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-03 16:35:54.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"67c2bcf15713b87b018124d4b4a0d7086ca3785d","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-03 16:39:47.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"46057f9401360ff90403d9d51d09fa8443732215","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-04 03:44:36.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/c8e622e16e334d8c9d5e6db31e104530 : FAILURE in 17m 39s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/b070761b230a4420b7a9ef5b97faa69f : FAILURE in 13m 24s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/5b7d42d5bce14f9ba2fa9cff325d4393 : SUCCESS in 9m 02s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/727a1bf3ef3249779c7f04393335f036 : FAILURE in 12m 31s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/89581c20041c4d43a73346dfc94ecde3 : FAILURE in 16m 06s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/091667bed6b446f5b37113d890767389 : SUCCESS in 17m 47s\n- grenade https://zuul.opendev.org/t/openstack/build/2d88d37e604347338678cb9ad834423e : SUCCESS in 1h 02m 29s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/5836a6b9323548218ebe53730179c356 : SUCCESS in 1h 27m 04s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/6ff46b8146524e11a840f6cd73d21aa5 : SUCCESS in 7m 00s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/b9835487f78c494a981c411c41673981 : SUCCESS in 38m 21s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/3adfd958b9fc492387bb7bbb65e7ecd9 : SUCCESS in 42m 12s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/3c0cb834e5804381a598b6539c29a13e : SUCCESS in 38m 16s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/397c60478d3a44cf8d2d0376f000720b : SUCCESS in 14m 21s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/1b960f28758540b1aab9ccb402f87a56 : FAILURE in 14m 38s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/de4200b8a7c243ea85173c7a0b0eace5 : SUCCESS in 1h 12m 47s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/b495705fcf294b6d95d6cb25a85c913b : SUCCESS in 35m 00s","accounts_in_message":[],"_revision_number":3},{"id":"bc45e34712514452051d2021ab63c799470b584f","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-11 17:01:38.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"136d9cc0b1504248ad4d597edca28daf36116e37","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-11 21:54:42.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/a698c1e3eb524485b01aaaa73491b26a : SUCCESS in 25m 57s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/1c5974b9a98f4c3392fa8aec2b530294 : SUCCESS in 13m 57s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/ba66f0bc275245e58675fbc781c8878a : SUCCESS in 8m 33s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/5b8d30d4738d4403a28a800209e1d3e5 : SUCCESS in 13m 44s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/e73527c63bc44543b0c62eebddbe8720 : SUCCESS in 14m 30s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e3df0db40f27483ab50f5b23ea953bc2 : SUCCESS in 16m 33s\n- grenade https://zuul.opendev.org/t/openstack/build/cbfe0e9025694a7585fa683d10970773 : SUCCESS in 1h 00m 15s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/1dc0b4fd6e044e20a923f45091d5b958 : SUCCESS in 1h 26m 11s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/7e811c3c511c4fa38f39d7975ac25eb4 : SUCCESS in 9m 43s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/a23f8643b1aa4f4394b3ec4a1ad9b6de : SUCCESS in 41m 07s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/a5381d58223e4c36b7349caff1b01dfa : SUCCESS in 39m 19s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/1ea1ba5c6ce94a91a123b5a650efba63 : SUCCESS in 38m 50s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/6f21a470976d476496b66b2f803e47eb : SUCCESS in 21m 31s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/ef3d1b2e07b145e99c093c6446c11db2 : FAILURE in 16m 46s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/2d1c66447c88413c92d2e13db21b323c : SUCCESS in 1h 02m 48s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/2c676760e6e74b78ab36d6f111cdcc83 : SUCCESS in 37m 52s","accounts_in_message":[],"_revision_number":4},{"id":"a42ac0cbc6bc85120a2631e4d89909da66f82975","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-11-16 23:17:20.000000000","message":"Patch Set 4: Code-Review+2\n\nCould you make a functional test building on https://review.opendev.org/686305 that depends-on this?","accounts_in_message":[],"_revision_number":4},{"id":"24db3082a96ab95b7ac61f16578c56caeb820afb","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 18:59:46.000000000","message":"Patch Set 4:\n\n\u003e Patch Set 4: Code-Review+2\n\u003e \n\u003e Could you make a functional test building on https://review.opendev.org/686305 that depends-on this?\n\nYes - I\u0027ll get that proposed shortly.","accounts_in_message":[],"_revision_number":4},{"id":"2f1a10a4708ad23ceeba1f18418246413b5fdc62","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-12-03 18:13:56.000000000","message":"Patch Set 4:\n\n\u003e Patch Set 4: Code-Review+2\n\u003e \n\u003e Could you make a functional test building on https://review.opendev.org/686305 that depends-on this?\n\nTook a stab at addressing this in keystone-tempest-plugin:\n\nhttps://review.opendev.org/c/openstack/keystone-tempest-plugin/+/765358","accounts_in_message":[],"_revision_number":4},{"id":"ed84b7fb62c7750d79c62cf18f0b43dc1fd20065","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2021-01-04 21:43:16.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"d11292e2479dcf670c1cd33ff3c50a088981e9d9","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-04 21:44:30.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"81cbde15bcccc8c86dd8564312825e3c29e802b7","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-05 01:10:12.000000000","message":"Patch Set 4: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/384921eb9ef64f9eac3a1ff32bee980a : FAILURE in 4m 26s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/00ff6013d60c4f5abbb3e88d870040c3 : SUCCESS in 6m 13s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/7a435ba77d0148a8aac3831a7fb80457 : SUCCESS in 12m 42s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/6dda70c303124a669a65f447841a3f60 : SUCCESS in 15m 51s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/49c9815921744a7387771fc2f969503c : SUCCESS in 14m 21s\n- grenade https://zuul.opendev.org/t/openstack/build/ef04d48ff0e649a482f35ef902653cf8 : SUCCESS in 57m 44s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/a0978f0777774c20985c197c03084232 : SUCCESS in 1h 17m 52s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/35a0cb037c824c848b81df403d6aea36 : SUCCESS in 7m 40s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/efd5a67da1374c7583b33265706116ac : SUCCESS in 34m 45s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/c1c498ac582e4879a58ac0b67da2223a : SUCCESS in 33m 59s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/e939065645a24c8c8848750b2b4d41e5 : SUCCESS in 1h 07m 47s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/becf717fe3b24a289ec3a3551f4e5331 : SUCCESS in 39m 03s","accounts_in_message":[],"_revision_number":4},{"id":"5bde44d43d598c0419b96c366f70cb5aeba1f1f2","author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"date":"2021-01-05 16:54:14.000000000","message":"Patch Set 4:\n\nrecheck","accounts_in_message":[],"_revision_number":4},{"id":"f8830428e47c0108bd445c0fa341f24ae755b774","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-05 17:04:48.000000000","message":"Patch Set 4:\n\nrecheck","accounts_in_message":[],"_revision_number":4},{"id":"a07690b9ab963e58e05bce6757b0cfaa72377712","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-05 21:01:16.000000000","message":"Patch Set 4: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/239ba357ec53423dbcbecb887ab13e21 : SUCCESS in 17m 26s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/6a0851cddf004a87a720e9eec0676efe : FAILURE in 4m 09s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/297ee701e79949b192510e3f59654100 : SUCCESS in 5m 49s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/509a4eec9a3e479090f688436071c66a : SUCCESS in 13m 12s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/0e845d757f8440b89fdef2946631a3f5 : SUCCESS in 14m 09s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9dca17dee6b749fd8ea45a48b37377a6 : FAILURE in 8m 45s\n- grenade https://zuul.opendev.org/t/openstack/build/c0103d8c284a477a8046c78e062b08a6 : FAILURE in 8m 35s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/326e4a584e234067bf695cd3cd9cd959 : SUCCESS in 1h 25m 50s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/8f2fcdf4e504488780fb854ca483761f : SUCCESS in 6m 39s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/73cb0b6cf93a4a5a8e9fc1dfa6c2228f : SUCCESS in 31m 49s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/b45ab224ff8d4c1b890a9b0bcd776bc3 : SUCCESS in 32m 41s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/bb071f80d194435f8247b478b4de340f : SUCCESS in 26m 24s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/01d14eae65eb4981946f1dd50ecadb2b : SUCCESS in 18m 57s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/17f5906a4da44487820e9dabb8df17a3 : FAILURE in 15m 54s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/099080ae8a274f82a89cc57f40e7df3b : SUCCESS in 1h 00m 48s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/c85efd586e3549a087c5bae269d9b882 : SUCCESS in 38m 44s","accounts_in_message":[],"_revision_number":4},{"id":"891464d2facef13c36c059348a51521793d58bf6","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-07 04:30:34.000000000","message":"Patch Set 4:\n\nrecheck","accounts_in_message":[],"_revision_number":4},{"id":"fa9acfb3d12d387b0e6a124c6fbdba1fe862ad2c","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-07 05:47:50.000000000","message":"Patch Set 4:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/759414b33e324eb589aa2cf914d83597 : SUCCESS in 37m 29s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/5bbbed5e9c2242b48944a25575950cd3 : FAILURE in 3m 47s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/ffa7817af0d44a5f99b67f0377d36842 : SUCCESS in 4m 59s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/264c94f40c854207b1e17a0889f7a021 : SUCCESS in 21m 35s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/73671f2708214d0e97a6c214fb328587 : SUCCESS in 14m 32s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/891b1f436a1747e08863aa6586c5ef28 : FAILURE in 7m 27s\n- grenade https://zuul.opendev.org/t/openstack/build/aa4ef4e3ec8847b396cb2cfef3eb565c : SUCCESS in 1h 08m 02s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/fa0ae2c493fd4d5d9da02f804bca7bef : SUCCESS in 1h 13m 20s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/a064b27868c14278a2ee24716d4f7a59 : SUCCESS in 6m 58s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/446a1d5dba0146a49744de7a45bc3f2d : SUCCESS in 25m 59s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/fa0f35bd1abd403fb8bd731135f90d28 : SUCCESS in 31m 19s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/e8d825caf3ec4434b78e378501cc526e : SUCCESS in 26m 22s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/18b46c07c8884c0cbe4d0504f2547593 : SUCCESS in 12m 02s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/1646f8b87cdb425993b95ccae5b3a1b9 : FAILURE in 9m 18s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/e7b93181658f4b7286c7225f46303dca : SUCCESS in 1h 02m 53s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/5ed85aac0325484d955b9b754fd232cf : SUCCESS in 25m 02s","accounts_in_message":[],"_revision_number":4},{"id":"1b8fea97e19ce04f89721140ad4b6380e3d33f35","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-08 21:15:49.000000000","message":"Patch Set 4:\n\nrecheck","accounts_in_message":[],"_revision_number":4},{"id":"57f8c2772047fcdd885adcc89f68b04255527b89","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-09 00:42:24.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/c079943f4ae14e2e9e102e2e9d5292a9 : SUCCESS in 17m 07s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/2666c34f0324457189f8657eeed31ee3 : SUCCESS in 5m 15s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/2c6bd625f6194ca48d9695a9ef3bf755 : SUCCESS in 13m 13s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/18ad8904f6084c3980e23475f5655c5e : SUCCESS in 16m 32s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2927508705094e45a9c503316ed8c9fa : SUCCESS in 14m 16s\n- grenade https://zuul.opendev.org/t/openstack/build/93a146a7cc9b4b769a18c9366d1f6161 : SUCCESS in 58m 53s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/a672407ecaa0467cb24069f7d61917ac : SUCCESS in 1h 27m 10s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/98b12353856f47fcad310d927e9324f8 : SUCCESS in 7m 20s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/2cfd6929eb5449ffaf2302b1b201e70a : SUCCESS in 36m 22s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/0248f091007a4685aceb0784fdac66b4 : SUCCESS in 23m 55s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/855b993921f64bca8e5854c11c270906 : SUCCESS in 36m 39s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/98edd60e36804876a4dc8dd826b161ad : SUCCESS in 17m 39s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/b7ea43c367194f1da619ae962b703fdb : FAILURE in 12m 56s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/9263577f46134a988c99067c6faa89f9 : SUCCESS in 57m 45s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/0bd1d6f3b4a2434097c13dafa12851fa : SUCCESS in 36m 14s","accounts_in_message":[],"_revision_number":4},{"id":"a3f3215dae3e84a542818840e009ea8910e9b32e","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-09 00:42:42.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"b76fdd6071fa713f8137738812e4c4dc93d6f44d","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-09 02:08:55.000000000","message":"Patch Set 4: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/ae1a78e5e7124b0fa1a92b20a65e5565 : SUCCESS in 5m 49s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/dd6314cd966b4ac883b2ee2e34c3b874 : SUCCESS in 12m 28s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/0ad3deadd9a44d24875824450886002a : SUCCESS in 13m 46s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/94f7c2b1b03446fca70a1adb201c0558 : SUCCESS in 13m 04s\n- grenade https://zuul.opendev.org/t/openstack/build/782a0e55a83c4b63a2052985705a750f : SUCCESS in 1h 03m 45s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/333bede640a8483499f318b2372aa7b4 : FAILURE in 1h 20m 58s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/0531fb8162c34b4188381f5b71cfc392 : SUCCESS in 7m 16s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/8f63bb43fa864d7d8627f1c81ee61eb4 : SUCCESS in 34m 45s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/8179bf0a65834a71bad3253b8ca56003 : SUCCESS in 33m 24s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/01ca9b3afec243ab8dbbc802ecb506ff : SUCCESS in 59m 40s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/0543da6d62dd483f85ffa42c25951c2e : SUCCESS in 38m 44s","accounts_in_message":[],"_revision_number":4},{"id":"9b658fa00c364b585c759d14c0f503cf47218729","author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"date":"2021-01-10 21:28:05.000000000","message":"Patch Set 4:\n\nrecheck","accounts_in_message":[],"_revision_number":4},{"id":"d1a29e033df82ddec9ef60b1be4f17d7674f7d37","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-10 22:42:47.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/98ae5cfec71e4938bef455d53248f0dc : SUCCESS in 14m 40s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e899a3e515254e63bd342a38d0cc0474 : SUCCESS in 5m 49s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/786d9ec7dd3f4ea7b78e78afbb29ddb3 : SUCCESS in 13m 57s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/f90ba3c0ba9e43a89b77835a70dbc009 : SUCCESS in 13m 35s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/664c1a95528549489d0110f8513513d0 : SUCCESS in 13m 28s\n- grenade https://zuul.opendev.org/t/openstack/build/24f693ac76a648bc861795b34a26a9c1 : SUCCESS in 54m 28s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/e9b028366ee94e9ab92f3e07c731af0c : SUCCESS in 1h 13m 32s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/f43f45c983cc48a2b0b5397940a12aee : SUCCESS in 7m 28s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/7e22532880694710aab6a18184bb713a : SUCCESS in 29m 42s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/377fe366d2f74546865ffe148310cdce : SUCCESS in 26m 34s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/a5e35ef363614663bcfb4b7eb3625956 : SUCCESS in 29m 07s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/18129ef544ad456e886e095ac06a1c94 : SUCCESS in 14m 41s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/394a3db74709498489ecb442e205295b : FAILURE in 11m 11s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/8d7dbc2966574c6b8d9e999bf4cc9d60 : SUCCESS in 49m 00s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/f2f76835249445619c93974bb0ee362b : SUCCESS in 36m 08s","accounts_in_message":[],"_revision_number":4},{"id":"fb0fc08444c11757367c079ebd9f3a6acbab9472","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-10 22:42:59.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"e7bffa44e6e287f6cd480859bb51318e26d9706c","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-11 00:11:22.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4f47b11f89314438ae4f00268ff59dcb : SUCCESS in 5m 25s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/2d5705cc6cf04d69ab70bd975b743b77 : SUCCESS in 13m 35s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/b418914956e74751b3bbfe2efcf9a40e : SUCCESS in 13m 55s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/69b950ab749646b18718ebbbe8c695a5 : SUCCESS in 13m 17s\n- grenade https://zuul.opendev.org/t/openstack/build/9501d51f26324aaf8e5c66ea681e6649 : SUCCESS in 59m 17s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/75f37f525b1e4840ac87fac147176aad : SUCCESS in 1h 23m 02s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d2666202ef8948dba048bcda559c516c : SUCCESS in 6m 11s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/f81319a227004d47b92b2374cb0ed494 : SUCCESS in 33m 05s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/b55ffc41b1e14c5d88fdc3ab962220f1 : SUCCESS in 34m 23s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/681f6bedb4564c7f89bcb09dd98f60d5 : SUCCESS in 57m 27s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/404abdf327524ccc90f9319db4cf6b37 : SUCCESS in 36m 48s","accounts_in_message":[],"_revision_number":4},{"id":"77e003b979bd75802b778534415fa87d6ab7cc1b","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-11 00:11:23.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":4},{"id":"160a1759b9709f42c3afb8b08461a61993c17658","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-11 00:12:50.000000000","message":"Patch Set 4:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fd3362ef2fef42a8a33f0f8ae2f7302c : SUCCESS in 1m 04s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/fc4028a32654410283afb9be29fd42f1 : SUCCESS in 1m 05s","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"2d7bf10a5a145ed3b6e34c3cb95e05fb7e33e0d1","revisions":{"d667f14f6f906c2df9b3ba36ebc810d37fa3da71":{"kind":"REWORK","_number":1,"created":"2020-11-02 17:30:44.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/72/760972/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/72/760972/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/72/760972/1"}}},"commit":{"parents":[{"commit":"b0b93c03986f3bb40c5a2ec31ee37c83014e197a","subject":"Merge \"Generalize release note for bug 1878938\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b0b93c03986f3bb40c5a2ec31ee37c83014e197a"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:22:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:29:06.000000000","tz":0},"subject":"Use app cred user ID in policy enforcement","message":"Use app cred user ID in policy enforcement\n\nThe application credential policies use the `rule:owner` policy to allow\nusers to manage their own credentials. The policy engine pulled the\nuser_id attribute from the request path instead of the actual\napplication credential. This allowed for users to exploit the\nenforcement and view or delete application credentials they don\u0027t own.\n\nThis commit attempts to resolve the issue by updating the flask\nparameters before they\u0027re translated to policy arguments and target\ndata, prior to policy enforcement.\n\nChange-Id: I903d20fa41270499ca1c39d296120dd97cef5405\nCloses-Bug: 1901207\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/d667f14f6f906c2df9b3ba36ebc810d37fa3da71"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/d667f14f6f906c2df9b3ba36ebc810d37fa3da71"}]},"branch":"refs/heads/master"},"0e6caae6dd8b8dd7db65998eb6f3bbe25534d58f":{"kind":"REWORK","_number":2,"created":"2020-11-03 16:35:54.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/72/760972/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/72/760972/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/72/760972/2"}}},"commit":{"parents":[{"commit":"b0b93c03986f3bb40c5a2ec31ee37c83014e197a","subject":"Merge \"Generalize release note for bug 1878938\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b0b93c03986f3bb40c5a2ec31ee37c83014e197a"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:22:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-03 16:35:05.000000000","tz":0},"subject":"Use app cred user ID in policy enforcement","message":"Use app cred user ID in policy enforcement\n\nThe application credential policies use the `rule:owner` policy to allow\nusers to manage their own credentials. The policy engine pulled the\nuser_id attribute from the request path instead of the actual\napplication credential. This allowed for users to exploit the\nenforcement and view or delete application credentials they don\u0027t own.\n\nThis commit attempts to resolve the issue by updating the flask\nparameters before they\u0027re translated to policy arguments and target\ndata, prior to policy enforcement.\n\nChange-Id: I903d20fa41270499ca1c39d296120dd97cef5405\nCloses-Bug: 1901207\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/0e6caae6dd8b8dd7db65998eb6f3bbe25534d58f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/0e6caae6dd8b8dd7db65998eb6f3bbe25534d58f"}]},"branch":"refs/heads/master"},"78c502289c12b1a9f133f1a4d650f4b844f9070c":{"kind":"REWORK","_number":3,"created":"2020-11-03 16:39:47.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/72/760972/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/72/760972/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/72/760972/3"}}},"commit":{"parents":[{"commit":"b0b93c03986f3bb40c5a2ec31ee37c83014e197a","subject":"Merge \"Generalize release note for bug 1878938\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b0b93c03986f3bb40c5a2ec31ee37c83014e197a"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:22:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-03 16:38:58.000000000","tz":0},"subject":"Use app cred user ID in policy enforcement","message":"Use app cred user ID in policy enforcement\n\nThe application credential policies use the `rule:owner` policy to allow\nusers to manage their own credentials. The policy engine pulled the\nuser_id attribute from the request path instead of the actual\napplication credential. This allowed for users to exploit the\nenforcement and view or delete application credentials they don\u0027t own.\n\nThis commit attempts to resolve the issue by updating the flask\nparameters before they\u0027re translated to policy arguments and target\ndata, prior to policy enforcement.\n\nChange-Id: I903d20fa41270499ca1c39d296120dd97cef5405\nCloses-Bug: 1901207\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/78c502289c12b1a9f133f1a4d650f4b844f9070c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/78c502289c12b1a9f133f1a4d650f4b844f9070c"}]},"branch":"refs/heads/master"},"2d7bf10a5a145ed3b6e34c3cb95e05fb7e33e0d1":{"kind":"REWORK","_number":4,"created":"2020-11-11 17:01:38.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/72/760972/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/72/760972/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/72/760972/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/72/760972/4"}}},"commit":{"parents":[{"commit":"b0b93c03986f3bb40c5a2ec31ee37c83014e197a","subject":"Merge \"Generalize release note for bug 1878938\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b0b93c03986f3bb40c5a2ec31ee37c83014e197a"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:22:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-11 17:01:20.000000000","tz":-360},"subject":"Use app cred user ID in policy enforcement","message":"Use app cred user ID in policy enforcement\n\nThe application credential policies use the `rule:owner` policy to allow\nusers to manage their own credentials. The policy engine pulled the\nuser_id attribute from the request path instead of the actual\napplication credential. This allowed for users to exploit the\nenforcement and view or delete application credentials they don\u0027t own.\n\nThis commit attempts to resolve the issue by updating the flask\nparameters before they\u0027re translated to policy arguments and target\ndata, prior to policy enforcement.\n\nChange-Id: I903d20fa41270499ca1c39d296120dd97cef5405\nCloses-Bug: 1901207\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/2d7bf10a5a145ed3b6e34c3cb95e05fb7e33e0d1"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/2d7bf10a5a145ed3b6e34c3cb95e05fb7e33e0d1"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"}}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}