)]}'
{"id":"openstack%2Fkeystone~769222","triplet_id":"openstack%2Fkeystone~stable%2Ftrain~I903d20fa41270499ca1c39d296120dd97cef5405","project":"openstack/keystone","branch":"stable/train","hashtags":[],"change_id":"I903d20fa41270499ca1c39d296120dd97cef5405","subject":"Use app cred user ID in policy enforcement","status":"MERGED","created":"2021-01-04 22:14:19.000000000","updated":"2021-06-03 19:06:04.000000000","submitted":"2021-06-03 19:03:43.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"769222","meta_rev_id":"84203705da3115f927ee158d2d37a1311d2a63c8","_number":769222,"virtual_id_number":769222,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2021-06-03 19:03:38.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"recommended":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"all":[{"value":1,"date":"2021-01-22 19:29:39.000000000","permitted_voting_range":{"min":1,"max":2},"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":2,"date":"2021-06-03 15:50:56.000000000","_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":1,"default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"all":[{"value":0,"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":1,"date":"2021-06-03 15:50:56.000000000","_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2021-01-05 00:03:25.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-01-22 19:29:39.000000000","updated_by":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"reviewer":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"state":"REVIEWER"},{"updated":"2021-06-03 15:50:56.000000000","updated_by":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"reviewer":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"state":"REVIEWER"}],"messages":[{"id":"8ab02d8862d465490e6da9934f26a6402269970d","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-04 22:14:19.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"80841ded9a1e8321fa5503c6c828a71e27321dd1","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-05 00:03:25.000000000","message":"Patch Set 1: Verified-1\n\n(2 comments)\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/f08ff978089c44fda7462669ae036bf7 : SUCCESS in 22m 20s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/74a40bc233ed41c4abbe1d4faf00af75 : TIMED_OUT in 41m 00s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/9c51b607748d4cf7991c36c4c11a68d3 : FAILURE in 7m 46s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/3902e44698a94c258f2adee842db111e : SUCCESS in 13m 27s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/896875e4699444b59de772620074ac7b : SUCCESS in 14m 01s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/e5f710ae6c704f60b39d462e2b1563a0 : SUCCESS in 13m 21s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/cc117f2616c74b5f8899472136b1b57b : SUCCESS in 13m 12s\n- tempest-full https://zuul.opendev.org/t/openstack/build/c36e2144263e4e479b0e5a34ec874910 : SUCCESS in 1h 29m 33s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/a1c18279f710470e85b5cca695558f42 : SUCCESS in 58m 15s\n- grenade https://zuul.opendev.org/t/openstack/build/4e00c82dc1de48af925458f706d836b7 : SUCCESS in 57m 58s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/5d621440c16c465c90f60e9ff972cd04 : SUCCESS in 1h 14m 41s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/65bc62ced1684d3e8bda09713869d2ef : SUCCESS in 9m 03s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/18bed1d090c74862b785ebac94058d95 : SUCCESS in 25m 38s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/02d5eabea521431f8f14c0bd20621a81 : SUCCESS in 27m 43s\n- keystone-dsvm-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/f6855227587643ebb437289d0c274d24 : FAILURE in 5m 32s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/624ac4f65853479582872a3dcb1b2f46 : FAILURE in 5m 29s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/2bb03011fc794cde86cdd62bc65bc003 : FAILURE in 9m 45s (non-voting)\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/780b85b9d8324b4a89a400a784b87511 : SUCCESS in 20m 44s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/1575a1d6b2df4787bff3125fb71fbe62 : SUCCESS in 41m 45s (non-voting)\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/d05d2d7193eb4b28b195fc157e08a949 : FAILURE in 22m 38s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/22251c099470489ca80a1119417e4938 : SUCCESS in 50m 10s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/80fd23b977784aa8b0dd5662cbc808ed : FAILURE in 46m 38s","accounts_in_message":[],"_revision_number":1},{"id":"19c7db665b92b2be29f15ca0f1cf940541e28605","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-08 16:55:10.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"935a24b49a229a71ed4b2b7e3bdcabff87823062","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-08 22:24:59.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/e14fd7f870d344fc9a97fce44ebacb26 : SUCCESS in 17m 23s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/393a744667c043cb9b5455fabec9bf31 : TIMED_OUT in 40m 51s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/76c25848116f4b7a990c1abf36efce17 : SUCCESS in 5m 44s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/675ac35079ac4870a1508af0e3bfb192 : SUCCESS in 17m 54s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/53e72794e7664c9798a0761fe99c805a : SUCCESS in 16m 10s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/c2e1e1137b704610850eca70850a6e5a : SUCCESS in 16m 28s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2bec51b61a3f466eae1e0d31dbe0c76f : SUCCESS in 13m 17s\n- tempest-full https://zuul.opendev.org/t/openstack/build/f494346a64e94a40895045c613d2a288 : SUCCESS in 1h 07m 31s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/74589eb95a4b41a9ab5fb08e616c5360 : SUCCESS in 46m 53s\n- grenade https://zuul.opendev.org/t/openstack/build/0c186e7084b84fb58bad045c08c497da : SUCCESS in 1h 00m 51s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/ff64cba9ff5547798551a53d37e3a6ea : SUCCESS in 1h 16m 10s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/a2f8b9a0c1ef459991cbd71041650a18 : SUCCESS in 7m 48s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/9f9a170fe3b14a9bbbfd641d8c657b4a : SUCCESS in 32m 35s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/5345991a2edf41c48c23b9b33ad64c00 : SUCCESS in 33m 20s\n- keystone-dsvm-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/d1705764fba14303b898e4fdf7137213 : FAILURE in 9m 38s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/e055d607b5984275b5d47d65d03b27e3 : FAILURE in 14m 42s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/7e74ed0c2589411f823b1c8206d32f79 : FAILURE in 11m 24s (non-voting)\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/9ec5484f4aaf4cf583a9c5914ae6e4ea : SUCCESS in 16m 43s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/e5cbaf43ad634ce392114aa25b8fd54b : SUCCESS in 38m 32s (non-voting)\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/ffd68b3a05af4108a1a41fee80746ad3 : SUCCESS in 1h 07m 53s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/a44bb41116df4638bd76e2cfcb56905a : SUCCESS in 57m 13s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/cb4a5b64c5b7442fae7bad438aa34a24 : SUCCESS in 40m 40s","accounts_in_message":[],"_revision_number":2},{"id":"774a799fb1cd700e71843f793e34301c82e29787","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-12 14:27:50.000000000","message":"Patch Set 2:\n\nrecheck","accounts_in_message":[],"_revision_number":2},{"id":"e36f8c0b57c11591e419fb0d4c90adae35281be7","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-13 01:15:09.000000000","message":"Patch Set 2:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/91bb3fd64231448f85b284aca7b1ef04 : SUCCESS in 16m 01s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/d29ef9edc49c48fd83379a7d4ec57bfe : TIMED_OUT in 40m 52s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/23ba7dc0898945f785d4dcef43430649 : SUCCESS in 6m 21s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/f5e2611574c74674bb51487b9e4803c5 : SUCCESS in 20m 12s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/2890aed72a4e418d842b8e6f301c8558 : SUCCESS in 14m 10s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/8088416e92fe49839599f0a574e87f0f : SUCCESS in 15m 37s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e37f2d5670fb4991bae9a9f5265e8479 : SUCCESS in 11m 39s\n- tempest-full https://zuul.opendev.org/t/openstack/build/4c3075bc140643d39606cb010237147b : SUCCESS in 1h 17m 51s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/65589d352a6d455bbb5489f98245747b : SUCCESS in 51m 36s\n- grenade https://zuul.opendev.org/t/openstack/build/012f88eba3fc4ca1b433ecf911223ce2 : SUCCESS in 1h 01m 06s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/492cb9c74d84429e97d33ec33afc59a0 : SUCCESS in 1h 29m 44s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/b0a602fc77ce4ba189b902d028c258c2 : SUCCESS in 8m 05s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/1d7b1eb777f9429fa078da905c1fb545 : SUCCESS in 32m 08s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/d7e5a5707541412a8b6769089e7a98fc : SUCCESS in 41m 52s\n- keystone-dsvm-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/90bc2300f78b41d5af1c18cb05127cb3 : FAILURE in 12m 32s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/2937345f81a34f4d8e802eb4a42de91a : FAILURE in 6m 43s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/649eee9aede24faf8ffd652a8cfe97df : FAILURE in 7m 20s (non-voting)\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/7648e2a069bf4400b5d2bf1d7e1ed223 : SUCCESS in 13m 15s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/8f6d7718ea734db1925a0b93e6e0fd9f : SUCCESS in 35m 59s (non-voting)\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/0693d747644b4befa5cfa5f4a8de6d5d : SUCCESS in 57m 59s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/f3292d10522941f29ec8cbe0ebe09a66 : SUCCESS in 52m 09s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/e2aee73621ef478ba7d041162da9c46f : SUCCESS in 38m 23s","accounts_in_message":[],"_revision_number":2},{"id":"5b988b7880d4f2fbccccf053f852889d26e025a3","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-01-22 18:46:32.000000000","message":"Patch Set 3: Patch Set 2 was rebased","accounts_in_message":[],"_revision_number":3},{"id":"1c362139fed75687c83bd613a16fd54073a6f7d9","author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"date":"2021-01-22 19:29:39.000000000","message":"Patch Set 3: Code-Review+1","accounts_in_message":[],"_revision_number":3},{"id":"bab1a83cdd3c09b072b23d8454aae18829341dc7","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-22 21:40:58.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/32a5aeb3820a49e58ac6b405deaee8db : SUCCESS in 16m 56s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/fd279a99638a4d6abb8dc663f6e6cc14 : SUCCESS in 6m 48s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/6adfc6e75739482ba43aed04fa7eb600 : SUCCESS in 21m 32s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/bd4e59540cbe4ba896dc94d862777e5f : SUCCESS in 12m 23s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/ea5feccb95794204b6ec029c8ed32222 : SUCCESS in 14m 55s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/3b3a81def6f24baf9e4d39ef61e4cf5b : SUCCESS in 13m 54s\n- tempest-full https://zuul.opendev.org/t/openstack/build/6b65a590f0df41f49167832ac49ad46b : SUCCESS in 1h 38m 54s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/9f735e31377947b79755041d0eaa8bd3 : SUCCESS in 58m 35s\n- grenade https://zuul.opendev.org/t/openstack/build/cace80818a634a37ada4b778bae8c481 : SUCCESS in 1h 05m 56s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/5c2babcfe0ee418c9f3a3f91d45796b7 : SUCCESS in 1h 22m 36s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/ce2b275aaa004240887432accd787486 : SUCCESS in 6m 27s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/77da48fc6f2748148aee2aa61782bc6b : SUCCESS in 38m 25s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/d6424dc9c0ed4946bd5a25446a98765f : SUCCESS in 33m 28s\n- keystone-dsvm-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/f3fd78b16b91449bba213e559ebc45f4 : FAILURE in 10m 15s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/fa8919884aa745fb9c5f21ec3efbd4bd : FAILURE in 12m 49s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/c4268a0b356e4e73ba8c2681b804e5ae : FAILURE in 12m 46s (non-voting)\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/20c5412bbc4a44d0a83dfb4fdff6eb1a : FAILURE in 21m 47s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/d3357f464424499eaa0798863a9205c4 : SUCCESS in 43m 55s (non-voting)\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/d0e037efd3374ce9b72a0230c224ae48 : SUCCESS in 1h 13m 47s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/03c0e7e381b849558de6524ae1ffca1e : SUCCESS in 51m 41s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/4dd395cdd5244089b40c7cb5f7062d1d : SUCCESS in 52m 51s","accounts_in_message":[],"_revision_number":3},{"id":"906c346e2fd189bd3b09236970848bf9627f7707","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2021-06-03 15:50:56.000000000","message":"Patch Set 3: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":3},{"id":"33190d5400b277054c942ef6d5d4371c317e9649","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-06-03 15:51:37.000000000","message":"Patch Set 3: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":3},{"id":"45945f030b614cc3e84392287aaaea2f0fa28396","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-06-03 19:03:38.000000000","message":"Patch Set 3: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/03ca892e2ec041108cd3aa5cbaf99542 : SUCCESS in 7m 25s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/d49cfaf0951243beab3e865946019756 : SUCCESS in 13m 29s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/d626a7041197448a96e25edde1dc9680 : SUCCESS in 15m 17s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/5551b193d7154cfb8fb9230efea9fd64 : SUCCESS in 14m 03s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/3dcf13567a064e848df0d656a97af883 : SUCCESS in 13m 40s\n- tempest-full https://zuul.opendev.org/t/openstack/build/230e94a5bb98420d92137d3486e9dbaa : SUCCESS in 1h 25m 57s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/bf542646e9714f21916498282500a17a : SUCCESS in 59m 58s\n- grenade https://zuul.opendev.org/t/openstack/build/4d53a902fea74210ac9e46ad730f97dc : SUCCESS in 55m 20s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/927df3f3bccc43b595708d402eb58bef : SUCCESS in 1h 18m 14s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/4a9438a4f55f4821b386f367700243ad : SUCCESS in 9m 20s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/a7192e20b5434c158c36103019214bc2 : SUCCESS in 24m 17s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/9321b8c51c9a4eb3a72ebd65dd716844 : SUCCESS in 27m 49s\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/35622759681347ca87d83f1d28da7a9e : SUCCESS in 1h 08m 01s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/c4c2203445c74fadbf4ef80507f85484 : SUCCESS in 53m 09s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/e7bfc861e3ce4ba784b71a1d1ddf56a4 : SUCCESS in 58m 16s","accounts_in_message":[],"_revision_number":3},{"id":"bc687d0c192bc8482b55cd077aee4e3a2b87ab25","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-06-03 19:03:43.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":3},{"id":"84203705da3115f927ee158d2d37a1311d2a63c8","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-06-03 19:06:04.000000000","message":"Patch Set 3:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/832d0a4beed44c9393c1d4acb19751c4 : SUCCESS in 1m 50s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/51d1964f7e034488bca320dd421bb05c : SUCCESS in 1m 20s","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"9c879d46bf40f8a11e8033406bb1b8861baf3f51","revisions":{"93d368993985baf6eb0a1ea9f6c2fed32707c631":{"kind":"REWORK","_number":1,"created":"2021-01-04 22:14:19.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/22/769222/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/22/769222/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/22/769222/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/22/769222/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/22/769222/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/22/769222/1"}}},"commit":{"parents":[{"commit":"6df6aec584666d73996410f32ac79905c6030a0f","subject":"Merge \"Properly handle octet (byte) strings when converting LDAP responses\" into stable/train","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/6df6aec584666d73996410f32ac79905c6030a0f"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:22:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2021-01-04 22:06:00.000000000","tz":0},"subject":"Use app cred user ID in policy enforcement","message":"Use app cred user ID in policy enforcement\n\nThe application credential policies use the `rule:owner` policy to allow\nusers to manage their own credentials. The policy engine pulled the\nuser_id attribute from the request path instead of the actual\napplication credential. This allowed for users to exploit the\nenforcement and view or delete application credentials they don\u0027t own.\n\nThis commit attempts to resolve the issue by updating the flask\nparameters before they\u0027re translated to policy arguments and target\ndata, prior to policy enforcement.\n\nChange-Id: I903d20fa41270499ca1c39d296120dd97cef5405\nCloses-Bug: 1901207\n(cherry picked from commit 2d7bf10a5a145ed3b6e34c3cb95e05fb7e33e0d1)\n(cherry picked from commit 80832de6ced534bccbf7cfe24a6a01c8262c1779)\n(cherry picked from commit 661bf6a1dca502f37b5da9995c45ba60581e5e97)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/93d368993985baf6eb0a1ea9f6c2fed32707c631"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/93d368993985baf6eb0a1ea9f6c2fed32707c631"}]},"branch":"refs/heads/stable/train"},"ee3fee2c95cfb3f068480c0ca66bd6591afacf9f":{"kind":"REWORK","_number":2,"created":"2021-01-08 16:55:10.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/22/769222/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/22/769222/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/22/769222/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/22/769222/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/22/769222/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/22/769222/2"}}},"commit":{"parents":[{"commit":"6df6aec584666d73996410f32ac79905c6030a0f","subject":"Merge \"Properly handle octet (byte) strings when converting LDAP responses\" into stable/train","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/6df6aec584666d73996410f32ac79905c6030a0f"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:22:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2021-01-08 16:53:36.000000000","tz":0},"subject":"Use app cred user ID in policy enforcement","message":"Use app cred user ID in policy enforcement\n\nThe application credential policies use the `rule:owner` policy to allow\nusers to manage their own credentials. The policy engine pulled the\nuser_id attribute from the request path instead of the actual\napplication credential. This allowed for users to exploit the\nenforcement and view or delete application credentials they don\u0027t own.\n\nThis commit attempts to resolve the issue by updating the flask\nparameters before they\u0027re translated to policy arguments and target\ndata, prior to policy enforcement.\n\nThis commit also deviates slightly from backports to stable/ussuri,\nstable/victoria, and master (wallaby). This is because newer branches\nuse `http.client` to assert status codes and in stable/train we are\nstill using `http_client`. This change is functionally the same.\n\nChange-Id: I903d20fa41270499ca1c39d296120dd97cef5405\nCloses-Bug: 1901207\n(cherry picked from commit 2d7bf10a5a145ed3b6e34c3cb95e05fb7e33e0d1)\n(cherry picked from commit 80832de6ced534bccbf7cfe24a6a01c8262c1779)\n(cherry picked from commit 661bf6a1dca502f37b5da9995c45ba60581e5e97)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/ee3fee2c95cfb3f068480c0ca66bd6591afacf9f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/ee3fee2c95cfb3f068480c0ca66bd6591afacf9f"}]},"branch":"refs/heads/stable/train"},"9c879d46bf40f8a11e8033406bb1b8861baf3f51":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2021-01-22 18:46:32.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/22/769222/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/22/769222/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/22/769222/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/22/769222/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/22/769222/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/22/769222/3"}}},"commit":{"parents":[{"commit":"b49a465edc907d8b8f863904239b0d6c58293800","subject":"Drop lower-constraints job","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b49a465edc907d8b8f863904239b0d6c58293800"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-02 17:22:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@redhat.com","date":"2021-01-22 18:46:32.000000000","tz":0},"subject":"Use app cred user ID in policy enforcement","message":"Use app cred user ID in policy enforcement\n\nThe application credential policies use the `rule:owner` policy to allow\nusers to manage their own credentials. The policy engine pulled the\nuser_id attribute from the request path instead of the actual\napplication credential. This allowed for users to exploit the\nenforcement and view or delete application credentials they don\u0027t own.\n\nThis commit attempts to resolve the issue by updating the flask\nparameters before they\u0027re translated to policy arguments and target\ndata, prior to policy enforcement.\n\nThis commit also deviates slightly from backports to stable/ussuri,\nstable/victoria, and master (wallaby). This is because newer branches\nuse `http.client` to assert status codes and in stable/train we are\nstill using `http_client`. This change is functionally the same.\n\nChange-Id: I903d20fa41270499ca1c39d296120dd97cef5405\nCloses-Bug: 1901207\n(cherry picked from commit 2d7bf10a5a145ed3b6e34c3cb95e05fb7e33e0d1)\n(cherry picked from commit 80832de6ced534bccbf7cfe24a6a01c8262c1779)\n(cherry picked from commit 661bf6a1dca502f37b5da9995c45ba60581e5e97)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/9c879d46bf40f8a11e8033406bb1b8861baf3f51"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/9c879d46bf40f8a11e8033406bb1b8861baf3f51"}]},"branch":"refs/heads/stable/train","description":"Rebase"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"}}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}