)]}'
{"etc/policy.json":[{"author":{"_account_id":261,"name":"Salvatore Orlando","email":"salv.orlando@gmail.com","username":"salvatore-orlando"},"change_message_id":"a5906b1a364435c22cd9c811284906c88d2e898b","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"context_is_admin\":  \"role:admin\","},{"line_number":3,"context_line":"    \"admin_or_owner\": \"rule:context_is_admin or tenant_id:%(tenant_id)s\","},{"line_number":4,"context_line":"    \"res_list_or_admin_or_owner\": \"list_resources: or rule:admin_or_owner\","},{"line_number":5,"context_line":"    \"admin_or_network_owner\": \"rule:context_is_admin or tenant_id:%(network:tenant_id)s\","},{"line_number":6,"context_line":"    \"admin_only\": \"rule:context_is_admin\","},{"line_number":7,"context_line":"    \"regular_user\": \"\","}],"source_content_type":"application/json","patch_set":1,"id":"AAAAP3%2F%2Fo%2B4%3D","line":4,"updated":"2013-07-15 14:56:16.000000000","message":"list_resource appears to be a pass-all rule - I think it has been designed for ensuring 403s or other errors are not returned on list operations since admin_or_owner is hardly  enforceable in that case.\n\nThis won\u0027t allow anyway tenants to see other tenant\u0027s resource because the filtering happens when data are fetched from the db, but in fact it makes the admin_or_owner concept redundant","commit_id":"2f15be4578b31e91ec7cfaa69045c14db73f9838"},{"author":{"_account_id":2874,"name":"yong sheng gong","email":"gong.yongsheng@99cloud.net","username":"gongysh"},"change_message_id":"6f230c7559e47dbdb952c525c1be242f8dd9e956","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"context_is_admin\":  \"role:admin\","},{"line_number":3,"context_line":"    \"admin_or_owner\": \"rule:context_is_admin or tenant_id:%(tenant_id)s\","},{"line_number":4,"context_line":"    \"res_list_or_admin_or_owner\": \"list_resources: or rule:admin_or_owner\","},{"line_number":5,"context_line":"    \"admin_or_network_owner\": \"rule:context_is_admin or tenant_id:%(network:tenant_id)s\","},{"line_number":6,"context_line":"    \"admin_only\": \"rule:context_is_admin\","},{"line_number":7,"context_line":"    \"regular_user\": \"\","}],"source_content_type":"application/json","patch_set":1,"id":"AAAAP3%2F%2Fms0%3D","line":4,"in_reply_to":"AAAAP3%2F%2Fo%2B4%3D","updated":"2013-07-15 22:51:50.000000000","message":"Done","commit_id":"2f15be4578b31e91ec7cfaa69045c14db73f9838"},{"author":{"_account_id":261,"name":"Salvatore Orlando","email":"salv.orlando@gmail.com","username":"salvatore-orlando"},"change_message_id":"a5906b1a364435c22cd9c811284906c88d2e898b","unresolved":false,"context_lines":[{"line_number":7,"context_line":"    \"regular_user\": \"\","},{"line_number":8,"context_line":"    \"shared\": \"field:networks:shared\u003dTrue\","},{"line_number":9,"context_line":"    \"external\": \"field:networks:router:external\u003dTrue\","},{"line_number":10,"context_line":"    \"default\": \"rule:res_list_or_admin_or_owner\","},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"    \"subnets:private:read\": \"rule:admin_or_owner\","},{"line_number":13,"context_line":"    \"subnets:private:write\": \"rule:admin_or_owner\","}],"source_content_type":"application/json","patch_set":1,"id":"AAAAP3%2F%2Fo2Y%3D","line":10,"updated":"2013-07-15 14:56:16.000000000","message":"This will cause a bw incompatible change in current configurations - policy.json must be updated for all deployments.","commit_id":"2f15be4578b31e91ec7cfaa69045c14db73f9838"},{"author":{"_account_id":2874,"name":"yong sheng gong","email":"gong.yongsheng@99cloud.net","username":"gongysh"},"change_message_id":"6f230c7559e47dbdb952c525c1be242f8dd9e956","unresolved":false,"context_lines":[{"line_number":7,"context_line":"    \"regular_user\": \"\","},{"line_number":8,"context_line":"    \"shared\": \"field:networks:shared\u003dTrue\","},{"line_number":9,"context_line":"    \"external\": \"field:networks:router:external\u003dTrue\","},{"line_number":10,"context_line":"    \"default\": \"rule:res_list_or_admin_or_owner\","},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"    \"subnets:private:read\": \"rule:admin_or_owner\","},{"line_number":13,"context_line":"    \"subnets:private:write\": \"rule:admin_or_owner\","}],"source_content_type":"application/json","patch_set":1,"id":"AAAAP3%2F%2Fmsw%3D","line":10,"in_reply_to":"AAAAP3%2F%2Fo2Y%3D","updated":"2013-07-15 22:51:50.000000000","message":"Done","commit_id":"2f15be4578b31e91ec7cfaa69045c14db73f9838"}]}