)]}'
{"id":"openstack%2Fkeystone~991233","triplet_id":"openstack%2Fkeystone~master~Ieabca062a9a474fecd87157a196be4576f3e0735","project":"openstack/keystone","branch":"master","hashtags":[],"change_id":"Ieabca062a9a474fecd87157a196be4576f3e0735","subject":"Document filter_attr and request_body policy substitution prefixes","status":"NEW","created":"2026-06-02 22:11:10.000000000","updated":"2026-06-02 22:27:37.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":true,"submittable":false,"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"631bd134e788739fc7c8b65814861516e2ee2de1","_number":991233,"virtual_id_number":991233,"owner":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:check","value":1,"date":"2026-06-02 22:27:37.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-06-02 22:27:37.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"9cf3969a4e46a0cb7279a0cca8977600c7ab74b6","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-06-02 22:11:10.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"631bd134e788739fc7c8b65814861516e2ee2de1","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-02 22:27:37.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/598c425e163e4ff9ba21c7868fc3f5ae\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/ed694ac5a2044bb6bfd36b6ce3301d44 : SUCCESS in 6m 37s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/4f43aa2d524a48cf849bdee8d6a5c08f : SUCCESS in 11m 53s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/a78144202dac4c2d892391bdbe60bc0f : SUCCESS in 11m 22s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/74e4a28131004985b5193f465a3bf0d6 : SUCCESS in 3m 39s (non-voting)","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"4da9a2815f0fb0770fac5bb028a266f8664272ea","revisions":{"4da9a2815f0fb0770fac5bb028a266f8664272ea":{"kind":"REWORK","_number":1,"created":"2026-06-02 22:11:10.000000000","uploader":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"ref":"refs/changes/33/991233/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/33/991233/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/33/991233/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/33/991233/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/33/991233/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/33/991233/1"}}},"commit":{"parents":[{"commit":"eb3c0cd99a353fde717155aa80da4ddb4251ffe4","subject":"Merge \"Fix LDAP pagination to return all users beyond page_size\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/eb3c0cd99a353fde717155aa80da4ddb4251ffe4"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-06-02 22:08:56.000000000","tz":120},"committer":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-06-02 22:09:38.000000000","tz":120},"subject":"Document filter_attr and request_body policy substitution prefixes","message":"Document filter_attr and request_body policy substitution prefixes\n\nFollowing the CVE-2026-42999 fix, query-string filter values are\nnamespaced under filter_attr and JSON request body fields under\nrequest_body in the policy enforcement dictionary, instead of being\nmerged at the top level. Operators with custom policy rules that\nreference these sources directly need to update their substitutions\nto use the new prefixes.\n\n* Update the bug 2148398 release note to also describe the filter_attr\n  namespace, alongside the existing request_body description, and to\n  include concrete migration examples for both forms.\n\n* Extend the \u0027Writing Policies\u0027 admin documentation with a new \u0027Policy\n  substitution sources\u0027 subsection that tables all available\n  substitution prefixes (target.*, URL view args, token credentials,\n  filter_attr.*, request_body.*) and explains where each is sourced\n  from.\n\nChange-Id: Ieabca062a9a474fecd87157a196be4576f3e0735\nRelated-Bug: 2148398\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/4da9a2815f0fb0770fac5bb028a266f8664272ea"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/4da9a2815f0fb0770fac5bb028a266f8664272ea"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY"},{"label":"Workflow","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}