)]}'
{"id":"openstack%2Fkeystone~934213","triplet_id":"openstack%2Fkeystone~stable%2F2024.1~I452313ac7e1e6960748bcd1e667fb7c0076eb7a2","project":"openstack/keystone","branch":"stable/2024.1","attention_set":{},"removed_from_attention_set":{"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2025-02-24 17:46:15.000000000","reason":"Change was submitted"},"28619":{"account":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"last_update":"2025-02-24 14:11:38.000000000","reason":"Removed by \u003cGERRIT_ACCOUNT_37598\u003e by clicking the attention icon","reason_account":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}}},"hashtags":[],"change_id":"I452313ac7e1e6960748bcd1e667fb7c0076eb7a2","subject":"Fix implied roles in the application credentials","status":"MERGED","created":"2024-11-06 09:50:33.000000000","updated":"2025-02-24 17:47:25.000000000","submitted":"2025-02-24 17:46:15.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"934213","cherry_pick_of_change":910337,"cherry_pick_of_patch_set":3,"meta_rev_id":"8610d134a937734fc70aabfdafdddfd7b004ee4a","_number":934213,"virtual_id_number":934213,"owner":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2025-02-24 17:46:14.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"all":[{"value":2,"date":"2025-02-24 14:10:24.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":2,"date":"2025-02-21 14:11:34.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2025-02-21 14:18:07.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"all":[{"value":1,"date":"2025-02-24 14:10:24.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}],"reviewers":{"REVIEWER":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2024-11-06 09:50:33.000000000","updated_by":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"reviewer":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"state":"CC"},{"updated":"2024-11-06 10:54:01.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2024-11-06 11:09:21.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2025-02-21 14:11:34.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"state":"REVIEWER"},{"updated":"2025-02-21 14:18:07.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"state":"REVIEWER"},{"updated":"2025-02-22 15:22:37.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2025-02-24 14:10:24.000000000","updated_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"}],"messages":[{"id":"c183e6493be03cb969a1c69f3e1b482f293bbf4d","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"date":"2024-11-06 09:50:33.000000000","message":"Patch Set 1: Cherry Picked from branch master.","accounts_in_message":[],"_revision_number":1},{"id":"a4fb7e903ff4220098e615595c7324b2728d0485","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-11-06 10:54:01.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b136804d75e8480c88b294df6dc4ea56\n\n- openstack-tox-py38-arm64 https://zuul.opendev.org/t/openstack/build/5deef61f7bce43cabb61a790f851086f : TIMED_OUT in 1h 00m 52s (non-voting)\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/340a239ac9984f59ad84e10f936f8bde : TIMED_OUT in 1h 00m 59s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"2cba9d02e59e0c8d18e051b5b51397c4f41bcd17","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-11-06 11:09:21.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/3082431ffa6245f0af050364d8508713\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/786fbe74d68c49e88a7ca354884f1ed0 : SUCCESS in 13m 40s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e0315adb6e204f809e75b1bc7484571d : SUCCESS in 4m 00s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/eeb13901f1f047d3962f85e541513ddc : SUCCESS in 11m 42s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/c7a4212cd9e3463482ac660cd174f9cc : SUCCESS in 9m 41s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/4afc176ef2dd48109936b59fa399d939 : SUCCESS in 11m 27s\n- grenade https://zuul.opendev.org/t/openstack/build/af5a3e4148d34106bc0db9809b8e6ed4 : SUCCESS in 56m 39s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/e020fcdc46c942a78d4dfd9ff1866e33 : SUCCESS in 1h 16m 25s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/70a425c5ce424560b98aded68c756462 : SUCCESS in 35m 59s\n- keystone-dsvm-py3-functional-fips https://zuul.opendev.org/t/openstack/build/87e23e62551d45729ace00c23dee7543 : SUCCESS in 26m 32s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy https://zuul.opendev.org/t/openstack/build/a864066b0a1845c7860c56f5eae8b695 : FAILURE in 29m 01s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k https://zuul.opendev.org/t/openstack/build/6b0aa7955daf4d1a8e8d7715084207a1 : SUCCESS in 22m 02s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/0543b10deaa04783861035935a830e8b : SUCCESS in 19m 58s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/1fc784f40243467b9126d10250506d3d : FAILURE in 14m 31s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/1d5e80847d6745a993268ce4e41d29c8 : SUCCESS in 40m 44s","accounts_in_message":[],"_revision_number":1},{"id":"ac6a24e11db647532448c56acf5cb5129ed53c26","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2025-02-21 14:11:34.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"9df007751ddfcb41272a41c946964e57702e35e4","author":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"date":"2025-02-21 14:18:07.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"3ba12348c63fb3f3c271e5bc33ecf995573d92c1","author":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"date":"2025-02-24 14:10:24.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"00a1b9395a6ce2bb91ab6cb6c2b4dc503df31aee","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-02-24 14:11:03.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"838c683d76839b0b455cfad1412cb5ff9805efb7","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-02-24 17:46:14.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b9f6996e4f854419aa75f0bb7970d95e\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/9089289781e64ceb9eef015edfc25a45 : SUCCESS in 4m 25s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/4755f0eade274cd194580f68451519e0 : SUCCESS in 10m 51s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/5c003f119fed42b296f65a444fbc5868 : SUCCESS in 10m 32s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b3cff0fe5bb84b84a41ce77e3f3690ae : SUCCESS in 11m 26s\n- grenade https://zuul.opendev.org/t/openstack/build/5160c60b685347a68e163778db372ae5 : SUCCESS in 1h 16m 43s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/9dd59af24b43431596ecb5dfd0911a37 : SUCCESS in 1h 41m 22s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/68e52e1190f54210aa120d0cd13fce31 : SUCCESS in 32m 23s\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k https://zuul.opendev.org/t/openstack/build/bc9fd84db11542b58bac01fd5ac74f33 : SUCCESS in 37m 59s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/76dfd4cac761442587460df2de4830b8 : SUCCESS in 30m 47s","accounts_in_message":[],"_revision_number":1},{"id":"6ba264d0fd83140e08cb949d34060d5aaa6f1cff","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-02-24 17:46:15.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"8610d134a937734fc70aabfdafdddfd7b004ee4a","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-02-24 17:47:25.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/978b6b56bdeb4d46922099e3b08fd501\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fba8c8f0c5754f7285a9c12b3120d2e9 : SUCCESS in 49s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"2db5df14db2732ababef511495f695deadcbe310","revisions":{"2db5df14db2732ababef511495f695deadcbe310":{"kind":"REWORK","_number":1,"created":"2024-11-06 09:50:33.000000000","uploader":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"ref":"refs/changes/13/934213/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/13/934213/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/13/934213/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/13/934213/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/13/934213/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/13/934213/1"}}},"commit":{"parents":[{"commit":"62b3c9260b79b9596545debbd7e4fcd3b4eab972","subject":"Add keystone-manage reset_last_active command","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/62b3c9260b79b9596545debbd7e4fcd3b4eab972"}]}],"author":{"name":"gtema","email":"artem.goncharov@gmail.com","date":"2024-02-27 13:09:21.000000000","tz":60},"committer":{"name":"Dmitriy Rabotyagov","email":"dmitriy.rabotyagov@cleura.com","date":"2024-11-06 09:50:33.000000000","tz":0},"subject":"Fix implied roles in the application credentials","message":"Fix implied roles in the application credentials\n\nWhen user requests new application credentials without specifying roles\nexplicitly all current roles from the token are being used for that\n(including implied roles).\nWhen new application credentials are requested specifying a role that\nimplies another role (i.e. member) only that role is added into the\nlist. This is not what is expected, so change it by looping through\nevery requested role and add every implied role into the list if it is\nnot already there.\n\nRelated-Bug: https://bugs.launchpad.net/keystone/+bug/2030061\n\nChange-Id: I452313ac7e1e6960748bcd1e667fb7c0076eb7a2\n(cherry picked from commit c3c6d9854c5435cb4c64eea0ae7f134d2c03ba71)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/2db5df14db2732ababef511495f695deadcbe310"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/2db5df14db2732ababef511495f695deadcbe310"}]},"branch":"refs/heads/stable/2024.1"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{}}}]}