)]}'
{"id":"openstack%2Fkeystone~769221","triplet_id":"openstack%2Fkeystone~stable%2Fussuri~I903d20fa41270499ca1c39d296120dd97cef5405","project":"openstack/keystone","branch":"stable/ussuri","hashtags":[],"change_id":"I903d20fa41270499ca1c39d296120dd97cef5405","subject":"Use app cred user ID in policy enforcement","status":"MERGED","created":"2021-01-04 22:13:38.000000000","updated":"2021-06-03 02:52:52.000000000","submitted":"2021-06-03 02:51:12.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"769221","meta_rev_id":"49f0e38197526473757f9a2cc9af6cbf358b350d","_number":769221,"virtual_id_number":769221,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"value":0,"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2021-06-03 02:51:11.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"all":[{"value":2,"date":"2021-06-03 01:20:03.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"value":1,"date":"2021-06-03 02:52:52.000000000","post_submit":true,"permitted_voting_range":{"min":1,"max":2},"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":1,"date":"2021-03-18 03:01:00.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"all":[{"value":1,"date":"2021-06-03 01:20:03.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"value":0,"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2021-01-04 23:42:41.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-01-22 19:29:34.000000000","updated_by":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"reviewer":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"state":"REVIEWER"},{"updated":"2021-03-18 03:01:00.000000000","updated_by":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"reviewer":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"state":"REVIEWER"},{"updated":"2021-06-03 01:20:03.000000000","updated_by":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"reviewer":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"state":"REVIEWER"}],"messages":[{"id":"77c11f14fd56d13cf7cb43f96cb2652136e44156","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-04 22:13:38.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"019b491472ebdb919571d24b4cdad3c594bc7426","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-04 23:42:41.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/4d13fd9f25f44514bda921e88e6e309a : SUCCESS in 20m 28s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/9d8e5c0b63ae4a86ba9bc8ae704bf025 : TIMED_OUT in 41m 06s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/3ec2e3f6d78d4cf29ac59248dc32e007 : SUCCESS in 6m 00s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/5e78b0fbba674677a7bd51b9e8700a14 : SUCCESS in 12m 39s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/c9f46a51df364ee6812bd14f7246eaf2 : SUCCESS in 15m 21s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/0944d23e3ddc4b69af4f8b6d45a444a2 : SUCCESS in 16m 07s\n- grenade https://zuul.opendev.org/t/openstack/build/887fd7ecb0ed41989dcea0c60e643233 : SUCCESS in 1h 08m 45s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/a11b9c69b679470680304ce28892c305 : SUCCESS in 1h 17m 32s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/6c905bd433244c1fb696b7b1c40bd5cc : SUCCESS in 7m 31s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/ea5104181ed14b9e9622835f59fedc7e : SUCCESS in 31m 07s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/d6114e1a504145689831db7971e5437f : FAILURE in 8m 09s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/4b40389eefa644bdb8487de46041cd3c : FAILURE in 13m 21s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/e60bdbdc6c3c4217ab6b5904e161779e : FAILURE in 13m 36s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/ceb19b3c61ab43c9bac286e634a2d5a4 : SUCCESS in 39m 56s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/e8484d2818cb454ab05b2f0216439803 : SUCCESS in 55m 42s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/d475d70b00b84ad4ad7ac1716e2c8e7b : SUCCESS in 33m 58s","accounts_in_message":[],"_revision_number":1},{"id":"be98c43c4f2c13e1494b237316de76b08cdea3fd","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-08 16:51:25.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"f11afb164b52cfd599169c5be59660bffd1e20f4","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-08 22:34:50.000000000","message":"Patch Set 1:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/3e8afb1013ac4508aa4e16efb2a372d0 : SUCCESS in 15m 44s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/3fc8afd5e449461aa01187a031fd17a0 : TIMED_OUT in 41m 25s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4b8c08990629409182ae21980f93f691 : SUCCESS in 6m 54s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/8d4e7715698f41f4aa89b6d738d3d1b3 : SUCCESS in 25m 14s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/4fa8ab72eab948788417b90ba707aaaa : SUCCESS in 15m 37s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/7cebf24f89ea492285a06226ac18e29e : SUCCESS in 12m 17s\n- grenade https://zuul.opendev.org/t/openstack/build/3448f6a1f59c42718ef74e289e78fb95 : SUCCESS in 1h 04m 46s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/f23951c3af674411a0f8c862ab37b7e0 : SUCCESS in 1h 30m 05s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/e3854e6eb9ee45e5bd6b2e746ead9bfd : SUCCESS in 7m 17s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/29d7873e8d6e428592bb8a2fc911b297 : SUCCESS in 29m 05s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/c4fbe32c3da2450c925b593289a25ebf : FAILURE in 15m 01s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/3e2227a257b54f4eb90f9cc4d1fbee0c : FAILURE in 14m 11s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/0cea989b957a483eaec9c8f2cb27b17f : FAILURE in 17m 25s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/4bd9133cb1dd4da8b5d1df67cf9f5a0c : SUCCESS in 39m 51s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/5cdf1a589ee24042a9f9f89f590ae7ec : SUCCESS in 58m 22s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/937ef4ebe2f14889bb92cb1b621cbed5 : SUCCESS in 40m 14s","accounts_in_message":[],"_revision_number":1},{"id":"db7b7575799a6cff56faf3ffaa2bf08dcfe127cd","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-12 14:27:35.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"125f7b9746bf57f2d6586e7d83b9df0a7789d232","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-13 01:16:19.000000000","message":"Patch Set 1:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/fada82ad96c240acabe7caa14fa6e821 : SUCCESS in 14m 18s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/89d395a355fb484ca27331f4f3ab4c39 : TIMED_OUT in 41m 00s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/7fcce2ef1c6e47798d00e4c7ff52ebe8 : SUCCESS in 6m 05s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/69abc2c3287e488bbcfe4493479828a1 : SUCCESS in 27m 14s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/74efe47682eb4fb6858a7bba4051bc37 : SUCCESS in 17m 51s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2034f34a1419444ea39a78d63f9ff802 : SUCCESS in 12m 45s\n- grenade https://zuul.opendev.org/t/openstack/build/64c7c2d51483465d9e76ff19a39a9955 : SUCCESS in 1h 13m 45s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/2ed61ebcda034ac696ec451f9793c920 : SUCCESS in 1h 37m 32s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/edebd962222447fea3eb8a2ed95657db : SUCCESS in 6m 21s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/bec3ccf6f5314fd4a96a1ee41923f9e0 : SUCCESS in 31m 31s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/fdba3af0ad464c1f9615694cd2463e18 : FAILURE in 15m 49s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/8e59b0c75c13447d8a356d934631e03f : FAILURE in 6m 36s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/00d32d259c534f4bb7ab1a276734d1d9 : FAILURE in 14m 12s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/ee6bbb5e0ff54d34b0547dd7d12fda72 : SUCCESS in 42m 15s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/b937d5c8798244128147a82a978c7576 : SUCCESS in 1h 16m 13s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/67ab71a8e1ae4132825e8a08954edc74 : SUCCESS in 37m 36s","accounts_in_message":[],"_revision_number":1},{"id":"c69e836ec9ebe3760dfdfd33fb62b241317d4c3b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-22 18:46:04.000000000","message":"Patch Set 2: Patch Set 1 was rebased","accounts_in_message":[],"_revision_number":2},{"id":"431d56a027917a8284e4bb9dbdc1e98c78430a48","author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"date":"2021-01-22 19:29:34.000000000","message":"Patch Set 2: Code-Review+1","accounts_in_message":[],"_revision_number":2},{"id":"c4d58e2f29661519def63e3b4a22403c4ed18e9c","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-22 21:36:01.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/8056fdc153754386be71ad5cc64e4f67 : SUCCESS in 17m 48s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c9a52bd1a85a401cbb81a2e9d7f1a42d : SUCCESS in 6m 33s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/ca917c02e1c743f597067fdb0927122b : SUCCESS in 12m 09s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/dff51a687c754902a0407cbbce8b9957 : SUCCESS in 14m 19s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e00ddb121ee5461b909cd334405463c7 : SUCCESS in 15m 11s\n- grenade https://zuul.opendev.org/t/openstack/build/160f770439df4076b7ab9972cc9c4bb3 : SUCCESS in 1h 14m 25s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/6b568a867d8c4892863beedbb97c32e2 : SUCCESS in 1h 32m 41s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/1633368d24914400b1f4551095df1d16 : SUCCESS in 7m 21s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/b904e193ef59459d9ef49615b7cc48de : SUCCESS in 46m 39s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/34733f65620742acb9e0928d767f1b6e : FAILURE in 9m 40s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/f556bcafb73948f6879db70c46d4d944 : FAILURE in 9m 53s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/2a66d3f9c4c94fda9d03e329b60cc6c3 : FAILURE in 14m 45s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/1a67d3a6718b4b39b1a2f27527cf17f5 : SUCCESS in 39m 04s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/0a3e4377cd8344189f4981c26f7efcf6 : SUCCESS in 57m 27s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/705f7bd855874537a6c3aee63a6078ef : SUCCESS in 41m 55s","accounts_in_message":[],"_revision_number":2},{"id":"080f17e45b0003407dbf2391df530cc800a05401","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-22 23:06:47.000000000","message":"Patch Set 2:\n\nrecheck","accounts_in_message":[],"_revision_number":2},{"id":"727f698d4412ea544e598ada983d18c51e4294b2","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-23 00:36:14.000000000","message":"Patch Set 2:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/f24739ffb4554020a4b00838f13262b6 : SUCCESS in 20m 55s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/fc40d71d7e7e486f8737d7b121dc996b : SUCCESS in 6m 13s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/a978bd92ec4c445d86946bd05c9c0a1d : SUCCESS in 13m 34s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/09c78f74c2394b0b817ffadaf3c2e0e6 : SUCCESS in 15m 23s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1f1645e866024ef18f6dfdac27e345a1 : SUCCESS in 12m 52s\n- grenade https://zuul.opendev.org/t/openstack/build/b775699c9456456f946765f6087eeeac : SUCCESS in 1h 15m 16s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/a5688c0dec5c4944b1f17886820f44e0 : SUCCESS in 1h 23m 24s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/df78d4f26d9e4162a485a9c49422a82f : SUCCESS in 6m 29s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/a3a1ed88c678422087772cfcfc92b7bd : SUCCESS in 30m 43s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/a331b0cb67f1459da56a9d65f86269f4 : FAILURE in 14m 21s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/31dc53fe042043988b8b32b898c1b3d7 : FAILURE in 11m 50s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/ec5ffc3ea39040bc861a5719083a000d : FAILURE in 16m 14s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/ea5e0f5c7bce4967b8d21ed3a9bc3b7f : SUCCESS in 37m 33s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/de34a0c16ed349fd9b8bd6353df06950 : SUCCESS in 58m 51s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/76059dcc91d64f05bd27603dc9712760 : SUCCESS in 36m 36s","accounts_in_message":[],"_revision_number":2},{"id":"a45bc87716ec579e4c1bda967ba656465c2cb29e","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-25 14:54:21.000000000","message":"Patch Set 2:\n\nrecheck","accounts_in_message":[],"_revision_number":2},{"id":"a0a74c6b4d4bbe803a3f1ab37633ccfa5d22c717","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-25 17:04:38.000000000","message":"Patch Set 2:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/301aea8fcfbd48fa903264381b11cf91 : SUCCESS in 29m 42s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/31e0d0413c9a4374b35aacd20e8434be : SUCCESS in 10m 04s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/6063e8f616954038b0b034f737fc8e60 : TIMED_OUT in 41m 27s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/57ff5ec976e94261ab525add68870c2d : SUCCESS in 14m 55s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/ab8f02ca29204ceb97e9a8d0d7d97436 : SUCCESS in 14m 52s\n- grenade https://zuul.opendev.org/t/openstack/build/086c78b50eb24da78db54be1f6104595 : FAILURE in 10m 57s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/fe4bea18d7e145f5abe0bf12902c1a24 : SUCCESS in 1h 19m 54s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/2d28481a041646158bda7103cf92b126 : SUCCESS in 7m 12s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/3c45bcbfd2484b0d83b81ad56bc87d52 : SUCCESS in 31m 23s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/0383bfecac3c491385d7cb0b6b44ad79 : FAILURE in 14m 50s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/8d63da1e35d54a2d8f737e5946fe0ac2 : FAILURE in 12m 56s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/2136588affd5434aad38ddc222038ddf : FAILURE in 15m 51s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/77102f117589447c94131ed1654c39a3 : SUCCESS in 36m 11s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/b09c58fa76ab49ec8c29a7dd977674b0 : SUCCESS in 52m 14s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/5b7b84ad6f9b4075bb907ae6be678722 : SUCCESS in 36m 44s","accounts_in_message":[],"_revision_number":2},{"id":"d4218bb67c26783eb021616b0c68b2120d5fe566","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-25 22:27:26.000000000","message":"Patch Set 2:\n\nrecheck","accounts_in_message":[],"_revision_number":2},{"id":"faf11e4a1e5a3a7ae08e651e616fd4eeff1e9059","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-25 23:52:54.000000000","message":"Patch Set 2:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/a38747a99f88488ca15c3f05d3e24554 : SUCCESS in 17m 59s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4e1c7e33fad249438de633f9a1cd5d04 : SUCCESS in 7m 28s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/c29847ab445d47e8b7623b9bda389be2 : SUCCESS in 19m 32s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/65b683ae656d43ef9a94e437b0b79fbb : SUCCESS in 14m 30s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/7001332ff3a64e748439a2b06d898051 : SUCCESS in 12m 47s\n- grenade https://zuul.opendev.org/t/openstack/build/ebd59e4ede2648b18007c1d16ce67331 : FAILURE in 12m 41s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/e43ae8221c6c4c9893a05b88205eb9b2 : SUCCESS in 1h 24m 03s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/da879a75e77d4e569f6a3d2b3745c0d3 : SUCCESS in 6m 40s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/06d35e73b7a345cf974242b0d265a37d : SUCCESS in 29m 03s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/96ab0951145645ebb0ed2254fbe3a645 : FAILURE in 10m 45s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/3a5ed0a2d900469d8e04d8c3fd281522 : FAILURE in 6m 45s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/abafb6737fe44b108243fbfd2fd8c6dc : FAILURE in 15m 10s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/92e22707bb164cc6938b29d465fea0dc : SUCCESS in 39m 29s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/1c62afd97bc045df9d57c84042cd1292 : SUCCESS in 52m 35s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/a589dc8686c045f9a2f61f71ea756d38 : SUCCESS in 38m 58s","accounts_in_message":[],"_revision_number":2},{"id":"ef82fa3f633c576b3fffd732c45356ce7cd7ebb7","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-26 20:14:18.000000000","message":"Patch Set 2:\n\nrecheck","accounts_in_message":[],"_revision_number":2},{"id":"12223365f59ca2a701bd8b5c99001abf3a54ae7b","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-26 20:14:43.000000000","message":"Patch Set 2:\n\nLooks like we\u0027re having consistent issues with keystone-dsvm-py3-functional-federation-opensuse15-k2k","accounts_in_message":[],"_revision_number":2},{"id":"f6df8a1cb74833981d0157b424dfb082265bfa23","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-26 23:43:07.000000000","message":"Patch Set 2:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/4f92a8d58c964f3c9f62cb468355f82a : SUCCESS in 18m 40s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d3f120c647554c16a503e3cbec1bc1f0 : SUCCESS in 5m 42s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/8a8d2cf2423d4608a2c301d6bc54cc98 : SUCCESS in 16m 19s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/217fc95c637f43b987597104c139e46c : TIMED_OUT in 41m 10s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/40517146e457466fac2a86ed0838cffd : SUCCESS in 18m 01s\n- grenade https://zuul.opendev.org/t/openstack/build/4afbb9ba9d27404cb842011b204e7b35 : FAILURE in 11m 27s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/de5e3814e9034465b75e75e38d62f476 : SUCCESS in 1h 31m 11s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/a9695b37f4c5440d83bb71f2f115448e : SUCCESS in 8m 42s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/088cb1410fd645fdb039e63a22423706 : SUCCESS in 27m 36s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/ff27f93a74604dbf900c2482418172de : FAILURE in 7m 06s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/452aeb76194947a0b9aa923e386e025a : FAILURE in 18m 26s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/be718b4761af43aeac5f80e300ed5e85 : FAILURE in 19m 05s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/eaa489b5283241f482287c60e2586381 : SUCCESS in 32m 03s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/4f675fb0ca3345728a8f7c61247abfff : SUCCESS in 57m 11s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/3b3df5c8c24544f3815117b6cc25d278 : SUCCESS in 42m 10s","accounts_in_message":[],"_revision_number":2},{"id":"df7ca4edd22522540e2e0c3b42f15b69644e05c4","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-03-09 19:31:55.000000000","message":"Patch Set 3: Patch Set 2 was rebased","accounts_in_message":[],"_revision_number":3},{"id":"eed483f0fda9bab1d481163455bc696da354abfd","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-03-09 21:06:18.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/f5cc35af08c64b1ea5f6bf9158503fdc : SUCCESS in 22m 02s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/9b497fec957942b8a87660fe004fb76c : SUCCESS in 6m 32s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/ce2c5353c13144979083605e6475650c : SUCCESS in 14m 14s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/c5b56a8c4ddc4caf9235b2a09c619ea1 : SUCCESS in 16m 35s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/375c78d826384cbbb07874a0058538e9 : SUCCESS in 15m 34s\n- grenade https://zuul.opendev.org/t/openstack/build/cf4d09b2aec4497bb1a5dc79bd7014c5 : SUCCESS in 1h 06m 15s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/46e7e1716967440fbd513dee85272669 : SUCCESS in 1h 28m 30s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d1cab4be42a441e2b1e509f534e0b1a3 : SUCCESS in 6m 43s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/dec6578288db426f8bb0654f357faccd : SUCCESS in 32m 20s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/4067c5add0734eb8bbcb85e087e71a6e : SUCCESS in 42m 14s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/061906b45bfe41ca982a7c80b07cecb6 : SUCCESS in 33m 37s (non-voting)\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/aca58f6b97534d7582cdb25417251b57 : FAILURE in 15m 16s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/3b0d79e454b449878bf508335fedc3c2 : SUCCESS in 39m 48s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/6471555da60a4aa59737bc68e0897430 : SUCCESS in 1h 02m 01s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/042e9357a5144583a8643466e25bd5bc : SUCCESS in 33m 14s","accounts_in_message":[],"_revision_number":3},{"id":"f1aed2a6f612e40c31169201ab86272525a9f2d2","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2021-03-18 03:01:00.000000000","message":"Patch Set 3: Code-Review+1","accounts_in_message":[],"_revision_number":3},{"id":"7277abfbbd936fbc2bcad702c7afc6946ba48415","author":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"date":"2021-06-03 01:20:03.000000000","message":"Patch Set 3: Code-Review+2 Workflow+1\n\nSitting for awhile and needs to make it into train for EM. Looks good and merged to more recent branches, so going to push through.","accounts_in_message":[],"_revision_number":3},{"id":"f654e73ce2310bd00dcdf73185f820ecc0f4b381","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-06-03 01:20:24.000000000","message":"Patch Set 3: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":3},{"id":"91f9cfe00180c90cc079bb49d142272f07787c4f","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-06-03 02:51:11.000000000","message":"Patch Set 3: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/dcd596e3017e40b99f1c34f1fb7be861 : SUCCESS in 7m 33s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/9f45cf80efdb4bf7b3da7d551526c0fa : SUCCESS in 15m 01s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/10d8d9f291a0499c819045e8e195c681 : SUCCESS in 15m 25s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2a3bccf77c624b938b3ec7eace9dc3e3 : SUCCESS in 12m 31s\n- grenade https://zuul.opendev.org/t/openstack/build/0d52c9fbad064dceb91d2c0f37f09e95 : SUCCESS in 1h 13m 47s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/bff711c795214e978f03f83842099d98 : SUCCESS in 1h 22m 00s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/51e0de41065342d08ff5cf8b2d0df7a1 : SUCCESS in 8m 58s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/1fba1c13352842aa9124f02dba3613e8 : SUCCESS in 32m 37s\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/9b43e70a73604cf5907d51b8a68ce382 : SUCCESS in 48m 25s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/1f845f7501894aad8767aeade32c8a33 : SUCCESS in 1h 00m 16s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/91113e51a2474faeaf4545762e8ac27e : SUCCESS in 43m 09s","accounts_in_message":[],"_revision_number":3},{"id":"09d8cd7238785958c4d6bb90c7c8b9e6eb08902e","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-06-03 02:51:12.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":3},{"id":"f54126616dcfe8ce6d88877fa820547eb5e3f554","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-06-03 02:52:52.000000000","message":"Patch Set 3:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/f6085ac44a66424797da31902744a6ff : SUCCESS in 1m 22s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/239a846659ea4c64b86838109d353c34 : SUCCESS in 1m 00s","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"6b739ffc337ad5491b027a4c2312bf3f461079c8","revisions":{"661bf6a1dca502f37b5da9995c45ba60581e5e97":{"kind":"REWORK","_number":1,"created":"2021-01-04 22:13:38.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/21/769221/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/21/769221/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/21/769221/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/21/769221/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/21/769221/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/21/769221/1"}}},"commit":{"parents":[{"commit":"5a7ebf53bc797524ea90400bbea5bcd75f82ddd9","subject":"Merge \"Implement more robust connection handling for asynchronous LDAP calls\" into stable/ussuri","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/5a7ebf53bc797524ea90400bbea5bcd75f82ddd9"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:22:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2021-01-04 22:05:20.000000000","tz":0},"subject":"Use app cred user ID in policy enforcement","message":"Use app cred user ID in policy enforcement\n\nThe application credential policies use the `rule:owner` policy to allow\nusers to manage their own credentials. The policy engine pulled the\nuser_id attribute from the request path instead of the actual\napplication credential. This allowed for users to exploit the\nenforcement and view or delete application credentials they don\u0027t own.\n\nThis commit attempts to resolve the issue by updating the flask\nparameters before they\u0027re translated to policy arguments and target\ndata, prior to policy enforcement.\n\nChange-Id: I903d20fa41270499ca1c39d296120dd97cef5405\nCloses-Bug: 1901207\n(cherry picked from commit 2d7bf10a5a145ed3b6e34c3cb95e05fb7e33e0d1)\n(cherry picked from commit 80832de6ced534bccbf7cfe24a6a01c8262c1779)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/661bf6a1dca502f37b5da9995c45ba60581e5e97"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/661bf6a1dca502f37b5da9995c45ba60581e5e97"}]},"branch":"refs/heads/stable/ussuri"},"c42e28adaf7142cf7f784d45852dcd3245cf8e66":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2021-01-22 18:46:04.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/21/769221/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/21/769221/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/21/769221/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/21/769221/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/21/769221/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/21/769221/2"}}},"commit":{"parents":[{"commit":"62c3d8eeb63ddc0f6b7f1505ed9a8b393a80e548","subject":"Drop lower-constraints job","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/62c3d8eeb63ddc0f6b7f1505ed9a8b393a80e548"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:22:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@redhat.com","date":"2021-01-22 18:46:04.000000000","tz":0},"subject":"Use app cred user ID in policy enforcement","message":"Use app cred user ID in policy enforcement\n\nThe application credential policies use the `rule:owner` policy to allow\nusers to manage their own credentials. The policy engine pulled the\nuser_id attribute from the request path instead of the actual\napplication credential. This allowed for users to exploit the\nenforcement and view or delete application credentials they don\u0027t own.\n\nThis commit attempts to resolve the issue by updating the flask\nparameters before they\u0027re translated to policy arguments and target\ndata, prior to policy enforcement.\n\nChange-Id: I903d20fa41270499ca1c39d296120dd97cef5405\nCloses-Bug: 1901207\n(cherry picked from commit 2d7bf10a5a145ed3b6e34c3cb95e05fb7e33e0d1)\n(cherry picked from commit 80832de6ced534bccbf7cfe24a6a01c8262c1779)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/c42e28adaf7142cf7f784d45852dcd3245cf8e66"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/c42e28adaf7142cf7f784d45852dcd3245cf8e66"}]},"branch":"refs/heads/stable/ussuri","description":"Rebase"},"6b739ffc337ad5491b027a4c2312bf3f461079c8":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2021-03-09 19:31:55.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/21/769221/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/21/769221/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/21/769221/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/21/769221/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/21/769221/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/21/769221/3"}}},"commit":{"parents":[{"commit":"d55c6c705f88333548b703cdf70a2aa5e83a1d66","subject":"Drop lower-constraints job","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/d55c6c705f88333548b703cdf70a2aa5e83a1d66"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:22:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@redhat.com","date":"2021-03-09 19:31:55.000000000","tz":0},"subject":"Use app cred user ID in policy enforcement","message":"Use app cred user ID in policy enforcement\n\nThe application credential policies use the `rule:owner` policy to allow\nusers to manage their own credentials. The policy engine pulled the\nuser_id attribute from the request path instead of the actual\napplication credential. This allowed for users to exploit the\nenforcement and view or delete application credentials they don\u0027t own.\n\nThis commit attempts to resolve the issue by updating the flask\nparameters before they\u0027re translated to policy arguments and target\ndata, prior to policy enforcement.\n\nChange-Id: I903d20fa41270499ca1c39d296120dd97cef5405\nCloses-Bug: 1901207\n(cherry picked from commit 2d7bf10a5a145ed3b6e34c3cb95e05fb7e33e0d1)\n(cherry picked from commit 80832de6ced534bccbf7cfe24a6a01c8262c1779)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/6b739ffc337ad5491b027a4c2312bf3f461079c8"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/6b739ffc337ad5491b027a4c2312bf3f461079c8"}]},"branch":"refs/heads/stable/ussuri","description":"Rebase"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"}}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}