)]}'
{"id":"openstack%2Fneutron~838698","triplet_id":"openstack%2Fneutron~stable%2Fxena~I973f8896248c8222031c53343bb53ce48254da74","project":"openstack/neutron","branch":"stable/xena","topic":"bug/1959333-stable/yoga-stable/xena","attention_set":{},"removed_from_attention_set":{"11975":{"account":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"last_update":"2022-04-25 12:41:48.000000000","reason":"Change was abandoned"}},"hashtags":[],"change_id":"I973f8896248c8222031c53343bb53ce48254da74","subject":"Handle properly InvalidScope exceptions to not return error 500","status":"ABANDONED","created":"2022-04-20 14:52:34.000000000","updated":"2022-04-25 12:41:48.000000000","total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"cherry_pick_of_change":838697,"cherry_pick_of_patch_set":1,"meta_rev_id":"029739a87aac2e1ca7dbc98a3f3bbb948169a1b2","_number":838698,"virtual_id_number":838698,"owner":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"actions":{},"labels":{"Verified":{"disliked":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:check","value":-1,"date":"2022-04-20 16:28:12.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":-1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"CC":[{"_account_id":26622,"name":"Cloudbase Neutron Hyper-V CI","email":"neutron_hyperv_ci@cloudbasesolutions.com","username":"neutron_hyperv_ci"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2022-04-20 15:53:12.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2022-04-20 16:28:12.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2022-04-20 17:02:06.000000000","updated_by":{"_account_id":26622,"name":"Cloudbase Neutron Hyper-V CI","email":"neutron_hyperv_ci@cloudbasesolutions.com","username":"neutron_hyperv_ci"},"reviewer":{"_account_id":26622,"name":"Cloudbase Neutron Hyper-V CI","email":"neutron_hyperv_ci@cloudbasesolutions.com","username":"neutron_hyperv_ci"},"state":"CC"}],"messages":[{"id":"6991028039f739414942680c3e36b2b60becaaf4","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"date":"2022-04-20 14:52:34.000000000","message":"Patch Set 1: Cherry Picked from branch stable/yoga.","accounts_in_message":[],"_revision_number":1},{"id":"9611350b6d6a2fa681cb324d2639544a69ecf32c","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-04-20 15:53:12.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\n\n- openstack-tox-py38-arm64 https://zuul.opendev.org/t/openstack/build/cbd410052a474dcd8ffd6babb4f46152 : FAILURE in 57m 47s (non-voting)\n- openstack-tox-py39-arm64 https://zuul.opendev.org/t/openstack/build/52caf5ed0b11483398ffeefaaa0f013f : FAILURE in 56m 44s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"23a84f5e738db380e745b779558b028aa97a4a07","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-04-20 16:28:12.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- neutron-tempest-plugin-api-xena https://zuul.opendev.org/t/openstack/build/d2b3ebb7c7f74103bbd029750c91e49a : SUCCESS in 49m 44s\n- neutron-tempest-plugin-scenario-linuxbridge-xena https://zuul.opendev.org/t/openstack/build/f3db0f55cc52448fbdb3e0f0a3e52d29 : SUCCESS in 58m 24s\n- neutron-tempest-plugin-scenario-openvswitch-xena https://zuul.opendev.org/t/openstack/build/48ef3ebdeb4b4e61a49d7cf22da2fae9 : SUCCESS in 58m 56s\n- neutron-tempest-plugin-scenario-openvswitch-iptables_hybrid-xena https://zuul.opendev.org/t/openstack/build/4a7dcccf3db24b0fba1848f616b16846 : SUCCESS in 52m 01s\n- neutron-tempest-plugin-scenario-ovn-xena https://zuul.opendev.org/t/openstack/build/67e1102562c344fcaec0738562a6db8a : SUCCESS in 58m 10s\n- neutron-tempest-plugin-designate-scenario-xena https://zuul.opendev.org/t/openstack/build/156fc53f760d42b79314e3cc2fe1a05b : SUCCESS in 31m 19s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/188e9a638228483f97a1ece75b493ec0 : FAILURE in 35m 35s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/3fecc0a77ac74905804c92cb4823b9b7 : SUCCESS in 16m 19s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/7ce80aaf531249adbfe766c3e8de9e3b : FAILURE in 30m 07s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/b71536dbf0ec4418bd8f5297b684fef7 : FAILURE in 27m 20s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/fce8ead4982046cd9c430211cbbc36ae : FAILURE in 26m 22s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/7c23e08f1e094c2ca9ad147f4ebaab86 : SUCCESS in 12m 08s\n- neutron-functional-with-uwsgi https://zuul.opendev.org/t/openstack/build/d642ca99d2ed4b1585ef88301f9a0650 : SUCCESS in 45m 11s\n- neutron-fullstack-with-uwsgi https://zuul.opendev.org/t/openstack/build/ce1f7cd85a8740009d22be51a4436b61 : SUCCESS in 1h 21m 55s\n- neutron-ovs-rally-task https://zuul.opendev.org/t/openstack/build/3319255fa3e4458f90b7689a630523ee : SUCCESS in 1h 23m 42s\n- neutron-ovs-grenade-multinode https://zuul.opendev.org/t/openstack/build/8d3c386869924613aa151da804f279ff : SUCCESS in 59m 04s\n- neutron-ovs-grenade-dvr-multinode https://zuul.opendev.org/t/openstack/build/563f4ac512cc49cc8d2d0eed6b70b628 : SUCCESS in 1h 08m 48s (non-voting)\n- neutron-ovs-tempest-multinode-full https://zuul.opendev.org/t/openstack/build/ca0c760dfe6c47a89026d73815d85adb : SUCCESS in 1h 07m 29s\n- neutron-ovs-tempest-dvr-ha-multinode-full https://zuul.opendev.org/t/openstack/build/1bafb8d248954526b7d18bd0075ee6f4 : SUCCESS in 1h 23m 38s\n- neutron-ovn-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/d2331b57c64f43068bd58e5e99c9739a : SUCCESS in 56m 12s\n- neutron-ovn-rally-task https://zuul.opendev.org/t/openstack/build/6d6dd4626d24426893ae56ad3d74d2ef : SUCCESS in 1h 15m 33s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"0a43b9b2689b64a56afee9831a1ebdea43e0f16d","tag":"autogenerated:cloudbase-ci","author":{"_account_id":26622,"name":"Cloudbase Neutron Hyper-V CI","email":"neutron_hyperv_ci@cloudbasesolutions.com","username":"neutron_hyperv_ci"},"date":"2022-04-20 17:02:06.000000000","message":"Patch Set 1:\n\nBuild succeeded.\n\n- neutron http://cloudbase-ci.com/neutron/838698/1 : SUCCESS in 2h 08m 53s","accounts_in_message":[],"_revision_number":1},{"id":"029739a87aac2e1ca7dbc98a3f3bbb948169a1b2","tag":"autogenerated:gerrit:abandon","author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"date":"2022-04-25 12:41:48.000000000","message":"Abandoned\n\nnot needed in that branch","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"e87dbec96ea16a9f54285d188903edc1419e5f8f","revisions":{"e87dbec96ea16a9f54285d188903edc1419e5f8f":{"kind":"REWORK","_number":1,"created":"2022-04-20 14:52:34.000000000","uploader":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"ref":"refs/changes/98/838698/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/neutron","ref":"refs/changes/98/838698/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/neutron refs/changes/98/838698/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/neutron refs/changes/98/838698/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/neutron refs/changes/98/838698/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/neutron refs/changes/98/838698/1"}}},"commit":{"parents":[{"commit":"493afef940d548d02b997b0514643035a44ee030","subject":"Merge \"[API] Return 403 for POST requests when user is not authorized\" into stable/xena","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/493afef940d548d02b997b0514643035a44ee030"}]}],"author":{"name":"Slawek Kaplonski","email":"skaplons@redhat.com","date":"2022-01-28 11:08:32.000000000","tz":60},"committer":{"name":"Slawek Kaplonski","email":"skaplons@redhat.com","date":"2022-04-20 14:52:34.000000000","tz":0},"subject":"Handle properly InvalidScope exceptions to not return error 500","message":"Handle properly InvalidScope exceptions to not return error 500\n\nWhen new default policy rules and scope enforcement are enabled, Neutron\nneeds to handle properly not only PolicyNotAuthorized exception from\noslo_policy module but also InvalidScope exception.\nThis patch adds handling of that exception to the neutron policy\nmodules.\n\nIn the check() method from the neutron.policy module we are calling\nENFORCER.enforce() method with do_raise\u003dFalse which means that\nPolicyNotAuthorized isn\u0027t rasised. Unfortunately it seems that there is\nbug in oslo.policy module and InvalidScope is raised even with\ndo_raise\u003dFalse.\nFor now, lets workaround it in Neutron by properly handling InvalidScope\nexception in the check() method.\nThis workaround can be cleaned when bug [1] will be fixed in\noslo.policy.\n\n[1] https://bugs.launchpad.net/oslo.policy/+bug/1965315\n\nPartial-Bug: #1959333\nChange-Id: I973f8896248c8222031c53343bb53ce48254da74\n(cherry picked from commit 51d1899bacb1e5d625f201380035db634da2e27c)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/e87dbec96ea16a9f54285d188903edc1419e5f8f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/e87dbec96ea16a9f54285d188903edc1419e5f8f"}]},"branch":"refs/heads/stable/xena"}},"requirements":[],"submit_records":[],"submit_requirements":[]}