)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":5754,"name":"Alex Xu","email":"hejie.xu@intel.com","username":"xuhj"},"change_message_id":"4c40de5f7574ce2adeaf4b7b388db9a344a9941f","unresolved":false,"context_lines":[{"line_number":4,"context_line":"Commit:     Ghanshyam Mann \u003cghanshyammann@gmail.com\u003e"},{"line_number":5,"context_line":"CommitDate: 2017-10-02 08:41:28 +0000"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Spec for API extensions policy removal"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Partial implement blueprint api-extensions-merge-queens"},{"line_number":10,"context_line":"APIImpact"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"5f4e5783_c87a0687","line":7,"updated":"2017-10-11 02:15:17.000000000","message":"this title doesn\u0027t match the title of spec","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"}],"specs/queens/approved/api-extensions-merge-queens.rst":[{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"757cb3b0ecdcddbbda5c3e7cd3382bf52c9ed2c2","unresolved":false,"context_lines":[{"line_number":10,"context_line":""},{"line_number":11,"context_line":"https://blueprints.launchpad.net/nova/+spec/api-extensions-merge-queens"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"This spec is regarding the more cleanup and merge needed on API extensions"},{"line_number":14,"context_line":"side."},{"line_number":15,"context_line":"We have 4 items to do(detail in BP):"},{"line_number":16,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7f515b1d_0e35a8da","line":13,"range":{"start_line":13,"start_character":27,"end_line":13,"end_character":31},"updated":"2017-10-05 16:56:27.000000000","message":"additional","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":5754,"name":"Alex Xu","email":"hejie.xu@intel.com","username":"xuhj"},"change_message_id":"4c40de5f7574ce2adeaf4b7b388db9a344a9941f","unresolved":false,"context_lines":[{"line_number":40,"context_line":"These extensions have their own policies enforcement also."},{"line_number":41,"context_line":"Like \u0027os_compute_api:os-extended-availability-zone\u0027. Due to that, GET server"},{"line_number":42,"context_line":"API have multiple policies enforcement- show server policy + each extensions"},{"line_number":43,"context_line":"policies."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"As there is no way to enable/disable extensions in API but we do have"},{"line_number":46,"context_line":"extensions policies to control the APIs in term of their extended behavior."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_48c29687","line":43,"updated":"2017-10-11 02:15:17.000000000","message":"Probably we need to clear the problem of those policies, they are breaking the interoperability or some of them haven\u0027t useful usecase?","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"3ac93ff923d98129c4a54e1a80918db9d2341365","unresolved":false,"context_lines":[{"line_number":40,"context_line":"These extensions have their own policies enforcement also."},{"line_number":41,"context_line":"Like \u0027os_compute_api:os-extended-availability-zone\u0027. Due to that, GET server"},{"line_number":42,"context_line":"API have multiple policies enforcement- show server policy + each extensions"},{"line_number":43,"context_line":"policies."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"As there is no way to enable/disable extensions in API but we do have"},{"line_number":46,"context_line":"extensions policies to control the APIs in term of their extended behavior."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_b210be4f","line":43,"in_reply_to":"5f4e5783_48c29687","updated":"2017-10-17 08:05:06.000000000","message":"Done","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"757cb3b0ecdcddbbda5c3e7cd3382bf52c9ed2c2","unresolved":false,"context_lines":[{"line_number":58,"context_line":"Proposed change"},{"line_number":59,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"This spec propose to remove the below policies which are very much specific"},{"line_number":62,"context_line":"to API extensions just extending the API response."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"Server extensions:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7f515b1d_ce78b0f9","line":61,"updated":"2017-10-05 16:56:27.000000000","message":"There is work underway in Queens to support deprecating policies [1]. We should not remove policy rules without a deprecation cycle.\n\n[1] https://review.openstack.org/#/c/500141/","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"d227dd6906595f529680dd809f120fd1c6c077c2","unresolved":false,"context_lines":[{"line_number":58,"context_line":"Proposed change"},{"line_number":59,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"This spec propose to remove the below policies which are very much specific"},{"line_number":62,"context_line":"to API extensions just extending the API response."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"Server extensions:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_6032fdf3","line":61,"in_reply_to":"5f4e5783_a8b58af0","updated":"2017-10-11 11:26:32.000000000","message":"humm, My initial thought was to remove without deprecation as these are more introduced with API extensions.\nBut yea as we already exposed those they might be used somewhere.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":5754,"name":"Alex Xu","email":"hejie.xu@intel.com","username":"xuhj"},"change_message_id":"131b83727094cfc994ac37d49f6bfebc8afddb4d","unresolved":false,"context_lines":[{"line_number":58,"context_line":"Proposed change"},{"line_number":59,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"This spec propose to remove the below policies which are very much specific"},{"line_number":62,"context_line":"to API extensions just extending the API response."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"Server extensions:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_a8b58af0","line":61,"in_reply_to":"7f515b1d_ce78b0f9","updated":"2017-10-11 02:18:57.000000000","message":"+1","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"757cb3b0ecdcddbbda5c3e7cd3382bf52c9ed2c2","unresolved":false,"context_lines":[{"line_number":67,"context_line":""},{"line_number":68,"context_line":"  * File: api/openstack/compute/config_drive.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027config_drive\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-config-drive\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"* Extended AZ:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7f515b1d_a940ce08","line":70,"updated":"2017-10-05 16:56:27.000000000","message":"The default policy for this (and most of the others here) allows access to all, but it is possible that an operator has customized policy to be more restrictive. If we remove this, they lose that control. This should at least go through a deprecation cycle while we seek operator input, if not stay permanently in some form or another (i.e., might replace with a better name).","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"d227dd6906595f529680dd809f120fd1c6c077c2","unresolved":false,"context_lines":[{"line_number":67,"context_line":""},{"line_number":68,"context_line":"  * File: api/openstack/compute/config_drive.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027config_drive\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-config-drive\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"* Extended AZ:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_e074ad9b","line":70,"in_reply_to":"7f515b1d_a940ce08","updated":"2017-10-11 11:26:32.000000000","message":"yea it is admin and owner things. Agree to go with deprecation cycle.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"757cb3b0ecdcddbbda5c3e7cd3382bf52c9ed2c2","unresolved":false,"context_lines":[{"line_number":68,"context_line":"  * File: api/openstack/compute/config_drive.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027config_drive\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-config-drive\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"* Extended AZ:"},{"line_number":74,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7f515b1d_c41c0f79","line":71,"updated":"2017-10-05 16:56:27.000000000","message":"what do you mean by \"Soft\" here?","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"011ea893a917de99f97a64789ed2ff4812935081","unresolved":false,"context_lines":[{"line_number":68,"context_line":"  * File: api/openstack/compute/config_drive.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027config_drive\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-config-drive\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"* Extended AZ:"},{"line_number":74,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_9cd55946","line":71,"in_reply_to":"5f4e5783_8063b9dc","updated":"2017-10-11 18:10:17.000000000","message":"Please spell that out in the spec so everyone understands. Thanks!","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"3ac93ff923d98129c4a54e1a80918db9d2341365","unresolved":false,"context_lines":[{"line_number":68,"context_line":"  * File: api/openstack/compute/config_drive.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027config_drive\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-config-drive\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"* Extended AZ:"},{"line_number":74,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_f223d6a5","line":71,"in_reply_to":"5f4e5783_9cd55946","updated":"2017-10-17 08:05:06.000000000","message":"Done","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"d227dd6906595f529680dd809f120fd1c6c077c2","unresolved":false,"context_lines":[{"line_number":68,"context_line":"  * File: api/openstack/compute/config_drive.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027config_drive\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-config-drive\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"* Extended AZ:"},{"line_number":74,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_8063b9dc","line":71,"in_reply_to":"7f515b1d_c41c0f79","updated":"2017-10-11 11:26:32.000000000","message":"Soft enforcement means it does not throw exception if fail. It just does not add extended attribute.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"757cb3b0ecdcddbbda5c3e7cd3382bf52c9ed2c2","unresolved":false,"context_lines":[{"line_number":81,"context_line":""},{"line_number":82,"context_line":"  * File: api/openstack/compute/extended_server_attributes.py"},{"line_number":83,"context_line":"  * Purpose: add many server attribute in GET server response"},{"line_number":84,"context_line":"  * Policies: \u0027os_compute_api:os-extended-server-attributes\u0027"},{"line_number":85,"context_line":"  * Policy Enforcement: Soft"},{"line_number":86,"context_line":"  * NOTE: This extensions has \u0027host_status\u0027 policy(microversion 2.16) also"},{"line_number":87,"context_line":"    which will not be changed."}],"source_content_type":"text/x-rst","patch_set":3,"id":"7f515b1d_09680285","line":84,"updated":"2017-10-05 16:56:27.000000000","message":"The default for this restricts it to admins. We should never hardcode role restrictions, so removing this would open this function up to anyone who can GET servers, which is not just admins. So I don\u0027t think we could ever remove this without replacement.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"d227dd6906595f529680dd809f120fd1c6c077c2","unresolved":false,"context_lines":[{"line_number":81,"context_line":""},{"line_number":82,"context_line":"  * File: api/openstack/compute/extended_server_attributes.py"},{"line_number":83,"context_line":"  * Purpose: add many server attribute in GET server response"},{"line_number":84,"context_line":"  * Policies: \u0027os_compute_api:os-extended-server-attributes\u0027"},{"line_number":85,"context_line":"  * Policy Enforcement: Soft"},{"line_number":86,"context_line":"  * NOTE: This extensions has \u0027host_status\u0027 policy(microversion 2.16) also"},{"line_number":87,"context_line":"    which will not be changed."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_40d38139","line":84,"in_reply_to":"5f4e5783_088ede77","updated":"2017-10-11 11:26:32.000000000","message":"humm, except \u0027host\u0027 and \u0027hypervisor_hostname\u0027 other does not seems to be admin only attributes. \nwe can keep this policy for these attributes only then deprecate for other but need to check the way to do that.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":6062,"name":"jichenjc","email":"jichenjc@cn.ibm.com","username":"jichenjc"},"change_message_id":"4323169308eb2c1665ea4dbdea994a43c8539126","unresolved":false,"context_lines":[{"line_number":81,"context_line":""},{"line_number":82,"context_line":"  * File: api/openstack/compute/extended_server_attributes.py"},{"line_number":83,"context_line":"  * Purpose: add many server attribute in GET server response"},{"line_number":84,"context_line":"  * Policies: \u0027os_compute_api:os-extended-server-attributes\u0027"},{"line_number":85,"context_line":"  * Policy Enforcement: Soft"},{"line_number":86,"context_line":"  * NOTE: This extensions has \u0027host_status\u0027 policy(microversion 2.16) also"},{"line_number":87,"context_line":"    which will not be changed."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_d9abb186","line":84,"in_reply_to":"5f4e5783_40d38139","updated":"2017-10-13 07:11:00.000000000","message":"yeah, seems only host related are admin only thing\n\nwe may think about a micorversion to move them to normal output.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":5754,"name":"Alex Xu","email":"hejie.xu@intel.com","username":"xuhj"},"change_message_id":"4c40de5f7574ce2adeaf4b7b388db9a344a9941f","unresolved":false,"context_lines":[{"line_number":81,"context_line":""},{"line_number":82,"context_line":"  * File: api/openstack/compute/extended_server_attributes.py"},{"line_number":83,"context_line":"  * Purpose: add many server attribute in GET server response"},{"line_number":84,"context_line":"  * Policies: \u0027os_compute_api:os-extended-server-attributes\u0027"},{"line_number":85,"context_line":"  * Policy Enforcement: Soft"},{"line_number":86,"context_line":"  * NOTE: This extensions has \u0027host_status\u0027 policy(microversion 2.16) also"},{"line_number":87,"context_line":"    which will not be changed."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_088ede77","line":84,"in_reply_to":"7f515b1d_09680285","updated":"2017-10-11 02:15:17.000000000","message":"Yea, some of them like \u0027hypervisor_hostname\u0027 is for admin, but like \u0027user_data\u0027 should be for normal user.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"757cb3b0ecdcddbbda5c3e7cd3382bf52c9ed2c2","unresolved":false,"context_lines":[{"line_number":145,"context_line":"  * Purpose: add the \u0027os-flavor-access:is_public\u0027 in GET, POST flavor response"},{"line_number":146,"context_line":"  * Policies: \u0027os_compute_api:os-flavor-access\u0027"},{"line_number":147,"context_line":"  * Policy Enforcement: Soft"},{"line_number":148,"context_line":"  * NOTE: Same policy is used by other flavor access API, so proposal here is"},{"line_number":149,"context_line":"    to remove the policy enforcement from GET, POST flavor API."},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"Image extensions:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7f515b1d_891072aa","line":148,"updated":"2017-10-05 16:56:27.000000000","message":"this note doesn\u0027t seem specific enough... All of the APIs that the policy documentation says this is used for relate to GET  or POST on flavors.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"3ac93ff923d98129c4a54e1a80918db9d2341365","unresolved":false,"context_lines":[{"line_number":145,"context_line":"  * Purpose: add the \u0027os-flavor-access:is_public\u0027 in GET, POST flavor response"},{"line_number":146,"context_line":"  * Policies: \u0027os_compute_api:os-flavor-access\u0027"},{"line_number":147,"context_line":"  * Policy Enforcement: Soft"},{"line_number":148,"context_line":"  * NOTE: Same policy is used by other flavor access API, so proposal here is"},{"line_number":149,"context_line":"    to remove the policy enforcement from GET, POST flavor API."},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"Image extensions:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_9234a2df","line":148,"in_reply_to":"5f4e5783_9c31d9a5","updated":"2017-10-17 08:05:06.000000000","message":"Done","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"011ea893a917de99f97a64789ed2ff4812935081","unresolved":false,"context_lines":[{"line_number":145,"context_line":"  * Purpose: add the \u0027os-flavor-access:is_public\u0027 in GET, POST flavor response"},{"line_number":146,"context_line":"  * Policies: \u0027os_compute_api:os-flavor-access\u0027"},{"line_number":147,"context_line":"  * Policy Enforcement: Soft"},{"line_number":148,"context_line":"  * NOTE: Same policy is used by other flavor access API, so proposal here is"},{"line_number":149,"context_line":"    to remove the policy enforcement from GET, POST flavor API."},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"Image extensions:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_9c31d9a5","line":148,"in_reply_to":"5f4e5783_e09dcd59","updated":"2017-10-11 18:10:17.000000000","message":"please spell that out in the spec. Thanks!","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"d227dd6906595f529680dd809f120fd1c6c077c2","unresolved":false,"context_lines":[{"line_number":145,"context_line":"  * Purpose: add the \u0027os-flavor-access:is_public\u0027 in GET, POST flavor response"},{"line_number":146,"context_line":"  * Policies: \u0027os_compute_api:os-flavor-access\u0027"},{"line_number":147,"context_line":"  * Policy Enforcement: Soft"},{"line_number":148,"context_line":"  * NOTE: Same policy is used by other flavor access API, so proposal here is"},{"line_number":149,"context_line":"    to remove the policy enforcement from GET, POST flavor API."},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"Image extensions:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_e09dcd59","line":148,"in_reply_to":"7f515b1d_891072aa","updated":"2017-10-11 11:26:32.000000000","message":"This policy is used for multiple APIS. GET, POST /flavors to add \u0027os-flavor-access:is_public\u0027 in response. and for GET /flavors/{flavor_id}/os-flavor-access also. later one is not proposed to change.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":6062,"name":"jichenjc","email":"jichenjc@cn.ibm.com","username":"jichenjc"},"change_message_id":"4323169308eb2c1665ea4dbdea994a43c8539126","unresolved":false,"context_lines":[{"line_number":150,"context_line":""},{"line_number":151,"context_line":"Image extensions:"},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"* Image Size:"},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"  * File: api/openstack/compute/image_size.py"},{"line_number":156,"context_line":"  * Purpose: add the \u0027OS-EXT-IMG-SIZE:size\u0027 in GET image response"},{"line_number":157,"context_line":"  * Policies: \u0027os_compute_api:image-size\u0027"},{"line_number":158,"context_line":"  * Policy Enforcement: Soft"},{"line_number":159,"context_line":""},{"line_number":160,"context_line":"Limit extensions:"},{"line_number":161,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_79095d2f","line":158,"range":{"start_line":153,"start_character":0,"end_line":158,"end_character":28},"updated":"2017-10-13 07:11:00.000000000","message":"this API will be rejected if microversion exceed MAX_PROXY_API_SUPPORT_VERSION\ndo we plan to add a micorversion because we change the policy honor method and in turn change the output of /images output?\nbut we still get a 404 when we use new microversion?","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"3ac93ff923d98129c4a54e1a80918db9d2341365","unresolved":false,"context_lines":[{"line_number":150,"context_line":""},{"line_number":151,"context_line":"Image extensions:"},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"* Image Size:"},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"  * File: api/openstack/compute/image_size.py"},{"line_number":156,"context_line":"  * Purpose: add the \u0027OS-EXT-IMG-SIZE:size\u0027 in GET image response"},{"line_number":157,"context_line":"  * Policies: \u0027os_compute_api:image-size\u0027"},{"line_number":158,"context_line":"  * Policy Enforcement: Soft"},{"line_number":159,"context_line":""},{"line_number":160,"context_line":"Limit extensions:"},{"line_number":161,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_f20ab61d","line":158,"range":{"start_line":153,"start_character":0,"end_line":158,"end_character":28},"in_reply_to":"5f4e5783_79095d2f","updated":"2017-10-17 08:05:06.000000000","message":"I do think we need to add microversion for policy deprecation and removal. It will be more like config options. \n\nTo adopt the behavior change in cloud overriding this policy, there will be deprecation cycle.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"757cb3b0ecdcddbbda5c3e7cd3382bf52c9ed2c2","unresolved":false,"context_lines":[{"line_number":165,"context_line":"  * Purpose: Checks if the user has access to the requested project limits"},{"line_number":166,"context_line":"  * Policies: \u0027os_compute_api:os-used-limits\u0027"},{"line_number":167,"context_line":"  * Policy Enforcement: hard"},{"line_number":168,"context_line":"  * Proposal: Let\u0027s keep this as it is because this is scope checking things"},{"line_number":169,"context_line":"    not just extensions."},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"All of the above policies except last one(used limit) are proposed to remove"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7f515b1d_e9192688","line":168,"updated":"2017-10-05 16:56:27.000000000","message":"Actually, this definitely needs to go away, as mentioned in the comment there [1]. But that will be part of a separate effort... removing all scope checking from policy, since scope checks should never be configurable (you should either have access or you don\u0027t based on the scope of your token). Requires a solution to bug 968696.\n\n[1] https://github.com/openstack/nova/blob/6f8fe3cb144abce6e18c8968c1b23754d37885cd/nova/policies/used_limits.py#L25-L26","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"d227dd6906595f529680dd809f120fd1c6c077c2","unresolved":false,"context_lines":[{"line_number":165,"context_line":"  * Purpose: Checks if the user has access to the requested project limits"},{"line_number":166,"context_line":"  * Policies: \u0027os_compute_api:os-used-limits\u0027"},{"line_number":167,"context_line":"  * Policy Enforcement: hard"},{"line_number":168,"context_line":"  * Proposal: Let\u0027s keep this as it is because this is scope checking things"},{"line_number":169,"context_line":"    not just extensions."},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"All of the above policies except last one(used limit) are proposed to remove"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_40ddc112","line":168,"in_reply_to":"7f515b1d_e9192688","updated":"2017-10-11 11:26:32.000000000","message":"Yea that will go away with policy scope proposal.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"757cb3b0ecdcddbbda5c3e7cd3382bf52c9ed2c2","unresolved":false,"context_lines":[{"line_number":170,"context_line":""},{"line_number":171,"context_line":"All of the above policies except last one(used limit) are proposed to remove"},{"line_number":172,"context_line":"and without deprecation period. Reason to remove without deprecation period"},{"line_number":173,"context_line":"is because they are extensions related stuff and extensions are not under"},{"line_number":174,"context_line":"operator control now."},{"line_number":175,"context_line":""},{"line_number":176,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7f515b1d_84805748","line":173,"updated":"2017-10-05 16:56:27.000000000","message":"I don\u0027t buy this. It doesn\u0027t matter whether extensions are within their control. It matters whether policy has been under their control... and it has been. Totally separate things.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"3ac93ff923d98129c4a54e1a80918db9d2341365","unresolved":false,"context_lines":[{"line_number":170,"context_line":""},{"line_number":171,"context_line":"All of the above policies except last one(used limit) are proposed to remove"},{"line_number":172,"context_line":"and without deprecation period. Reason to remove without deprecation period"},{"line_number":173,"context_line":"is because they are extensions related stuff and extensions are not under"},{"line_number":174,"context_line":"operator control now."},{"line_number":175,"context_line":""},{"line_number":176,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_52798a91","line":173,"in_reply_to":"5f4e5783_19f1496c","updated":"2017-10-17 08:05:06.000000000","message":"Done","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":6062,"name":"jichenjc","email":"jichenjc@cn.ibm.com","username":"jichenjc"},"change_message_id":"4323169308eb2c1665ea4dbdea994a43c8539126","unresolved":false,"context_lines":[{"line_number":170,"context_line":""},{"line_number":171,"context_line":"All of the above policies except last one(used limit) are proposed to remove"},{"line_number":172,"context_line":"and without deprecation period. Reason to remove without deprecation period"},{"line_number":173,"context_line":"is because they are extensions related stuff and extensions are not under"},{"line_number":174,"context_line":"operator control now."},{"line_number":175,"context_line":""},{"line_number":176,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_19f1496c","line":173,"in_reply_to":"7f515b1d_84805748","updated":"2017-10-13 07:11:00.000000000","message":"yeah, I guess all stuffs we offered to be configurable by operators need deprecate cycle..","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"757cb3b0ecdcddbbda5c3e7cd3382bf52c9ed2c2","unresolved":false,"context_lines":[{"line_number":177,"context_line":"Alternatives"},{"line_number":178,"context_line":"------------"},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Leave the policies and keep doing the multiple policies enforcement in single"},{"line_number":181,"context_line":"API."},{"line_number":182,"context_line":""},{"line_number":183,"context_line":"Data model impact"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7f515b1d_64dc3b74","line":180,"updated":"2017-10-05 16:56:27.000000000","message":"or deprecate...","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":5754,"name":"Alex Xu","email":"hejie.xu@intel.com","username":"xuhj"},"change_message_id":"4c40de5f7574ce2adeaf4b7b388db9a344a9941f","unresolved":false,"context_lines":[{"line_number":178,"context_line":"------------"},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Leave the policies and keep doing the multiple policies enforcement in single"},{"line_number":181,"context_line":"API."},{"line_number":182,"context_line":""},{"line_number":183,"context_line":"Data model impact"},{"line_number":184,"context_line":"-----------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_e836e2b4","line":181,"updated":"2017-10-11 02:15:17.000000000","message":"Another alternative is policy discovery API, but it doesn\u0027t exist.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"3ac93ff923d98129c4a54e1a80918db9d2341365","unresolved":false,"context_lines":[{"line_number":178,"context_line":"------------"},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Leave the policies and keep doing the multiple policies enforcement in single"},{"line_number":181,"context_line":"API."},{"line_number":182,"context_line":""},{"line_number":183,"context_line":"Data model impact"},{"line_number":184,"context_line":"-----------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_725da613","line":181,"in_reply_to":"5f4e5783_1ce28902","updated":"2017-10-17 08:05:06.000000000","message":"Done","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"011ea893a917de99f97a64789ed2ff4812935081","unresolved":false,"context_lines":[{"line_number":178,"context_line":"------------"},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Leave the policies and keep doing the multiple policies enforcement in single"},{"line_number":181,"context_line":"API."},{"line_number":182,"context_line":""},{"line_number":183,"context_line":"Data model impact"},{"line_number":184,"context_line":"-----------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_1ce28902","line":181,"in_reply_to":"5f4e5783_e836e2b4","updated":"2017-10-11 18:10:17.000000000","message":"How would that be an alternative here?\n\nNote: a policy discovery API is a long way off, if it ever happens (there is significant resistance).","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"757cb3b0ecdcddbbda5c3e7cd3382bf52c9ed2c2","unresolved":false,"context_lines":[{"line_number":233,"context_line":"Security impact"},{"line_number":234,"context_line":"---------------"},{"line_number":235,"context_line":""},{"line_number":236,"context_line":"None"},{"line_number":237,"context_line":""},{"line_number":238,"context_line":"Notifications impact"},{"line_number":239,"context_line":"--------------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7f515b1d_2407631f","line":236,"updated":"2017-10-05 16:56:27.000000000","message":"not true.... see comments above. Anyone customizing policy for these will be impacted from a security perspective. And even those who are not customizing policy would be impacted for policy rules that were previously restricted to admin by default.","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"3ac93ff923d98129c4a54e1a80918db9d2341365","unresolved":false,"context_lines":[{"line_number":233,"context_line":"Security impact"},{"line_number":234,"context_line":"---------------"},{"line_number":235,"context_line":""},{"line_number":236,"context_line":"None"},{"line_number":237,"context_line":""},{"line_number":238,"context_line":"Notifications impact"},{"line_number":239,"context_line":"--------------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5f4e5783_72d486e9","line":236,"in_reply_to":"7f515b1d_2407631f","updated":"2017-10-17 08:05:06.000000000","message":"Done","commit_id":"1b03665013fa8988869d5058e6e3e6383cf8a4f7"}],"specs/queens/approved/api-extensions-policy-removal.rst":[{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"007c5e44abc6319a31492da69b79debb27e69a28","unresolved":false,"context_lines":[{"line_number":40,"context_line":"Use Cases"},{"line_number":41,"context_line":"---------"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"* As an operator, clean and very clear policies for APIs. Multiple policies"},{"line_number":44,"context_line":"  controlling single APIs for different response element might not be good and"},{"line_number":45,"context_line":"  clear always."},{"line_number":46,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_0034cafa","line":43,"range":{"start_line":43,"start_character":17,"end_line":43,"end_character":18},"updated":"2017-10-17 17:27:10.000000000","message":"nit: i want","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2cc57d87dec75d820ce0af253bee083adef65e82","unresolved":false,"context_lines":[{"line_number":40,"context_line":"Use Cases"},{"line_number":41,"context_line":"---------"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"* As an operator, clean and very clear policies for APIs. Multiple policies"},{"line_number":44,"context_line":"  controlling single APIs for different response element might not be good and"},{"line_number":45,"context_line":"  clear always."},{"line_number":46,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_d6a66ec1","line":43,"range":{"start_line":43,"start_character":17,"end_line":43,"end_character":18},"in_reply_to":"5f4e5783_0034cafa","updated":"2017-10-18 04:49:57.000000000","message":"Done","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"007c5e44abc6319a31492da69b79debb27e69a28","unresolved":false,"context_lines":[{"line_number":44,"context_line":"  controlling single APIs for different response element might not be good and"},{"line_number":45,"context_line":"  clear always."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"* As an API developer, easy to maintain the policies for APIs by cleaning up"},{"line_number":48,"context_line":"  the legacy extensions policies."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"Proposed change"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_001dea72","line":47,"range":{"start_line":47,"start_character":22,"end_line":47,"end_character":23},"updated":"2017-10-17 17:27:10.000000000","message":"nit: i want","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2cc57d87dec75d820ce0af253bee083adef65e82","unresolved":false,"context_lines":[{"line_number":44,"context_line":"  controlling single APIs for different response element might not be good and"},{"line_number":45,"context_line":"  clear always."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"* As an API developer, easy to maintain the policies for APIs by cleaning up"},{"line_number":48,"context_line":"  the legacy extensions policies."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"Proposed change"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_f6a3aab0","line":47,"range":{"start_line":47,"start_character":22,"end_line":47,"end_character":23},"in_reply_to":"5f4e5783_001dea72","updated":"2017-10-18 04:49:57.000000000","message":"Done","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"007c5e44abc6319a31492da69b79debb27e69a28","unresolved":false,"context_lines":[{"line_number":82,"context_line":"  * Proposal:"},{"line_number":83,"context_line":"    To keep this policy unchanged for admin related attributes:"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"    * ``OS-EXT-SRV-ATTR:host``"},{"line_number":86,"context_line":"    * ``OS-EXT-SRV-ATTR:hostname``"},{"line_number":87,"context_line":"    * ``OS-EXT-SRV-ATTR:hypervisor_hostname``"},{"line_number":88,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_57d4c9e8","line":85,"range":{"start_line":85,"start_character":8,"end_line":85,"end_character":23},"updated":"2017-10-17 17:27:10.000000000","message":"when adding to the server resource will the prefix be changed to remove EXT as they are no longer extensions?","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":6062,"name":"jichenjc","email":"jichenjc@cn.ibm.com","username":"jichenjc"},"change_message_id":"1874000d3f1cf3517d0de55869b0bff8bb2d437d","unresolved":false,"context_lines":[{"line_number":82,"context_line":"  * Proposal:"},{"line_number":83,"context_line":"    To keep this policy unchanged for admin related attributes:"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"    * ``OS-EXT-SRV-ATTR:host``"},{"line_number":86,"context_line":"    * ``OS-EXT-SRV-ATTR:hostname``"},{"line_number":87,"context_line":"    * ``OS-EXT-SRV-ATTR:hypervisor_hostname``"},{"line_number":88,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_965b56f4","line":85,"range":{"start_line":85,"start_character":8,"end_line":85,"end_character":23},"in_reply_to":"5f4e5783_57d4c9e8","updated":"2017-10-18 02:47:01.000000000","message":"that will be another topic I guess?\nat least we want to keep the output as same as before?","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2cc57d87dec75d820ce0af253bee083adef65e82","unresolved":false,"context_lines":[{"line_number":82,"context_line":"  * Proposal:"},{"line_number":83,"context_line":"    To keep this policy unchanged for admin related attributes:"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"    * ``OS-EXT-SRV-ATTR:host``"},{"line_number":86,"context_line":"    * ``OS-EXT-SRV-ATTR:hostname``"},{"line_number":87,"context_line":"    * ``OS-EXT-SRV-ATTR:hypervisor_hostname``"},{"line_number":88,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_56cdde82","line":85,"range":{"start_line":85,"start_character":8,"end_line":85,"end_character":23},"in_reply_to":"5f4e5783_57d4c9e8","updated":"2017-10-18 04:49:57.000000000","message":"yes when adding new server resource, we do not need to use those prefix.  \nBut we cannot change the old name due to backward compatibility. *EXT* prefix does not make much sense now as no extensions.","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2cc57d87dec75d820ce0af253bee083adef65e82","unresolved":false,"context_lines":[{"line_number":82,"context_line":"  * Proposal:"},{"line_number":83,"context_line":"    To keep this policy unchanged for admin related attributes:"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"    * ``OS-EXT-SRV-ATTR:host``"},{"line_number":86,"context_line":"    * ``OS-EXT-SRV-ATTR:hostname``"},{"line_number":87,"context_line":"    * ``OS-EXT-SRV-ATTR:hypervisor_hostname``"},{"line_number":88,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_16988672","line":85,"range":{"start_line":85,"start_character":8,"end_line":85,"end_character":23},"in_reply_to":"5f4e5783_965b56f4","updated":"2017-10-18 04:49:57.000000000","message":"true, we cannot change old name(at least without version bump).","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":6062,"name":"jichenjc","email":"jichenjc@cn.ibm.com","username":"jichenjc"},"change_message_id":"1874000d3f1cf3517d0de55869b0bff8bb2d437d","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":"    To deprecate the policy for below normal users attribute:."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    * ``OS-EXT-SRV-ATTR:instance_name``"},{"line_number":92,"context_line":"    * ``OS-EXT-SRV-ATTR:reservation_id``"},{"line_number":93,"context_line":"    * ``OS-EXT-SRV-ATTR:launch_index``"},{"line_number":94,"context_line":"    * ``OS-EXT-SRV-ATTR:kernel_id``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_96291638","line":91,"range":{"start_line":91,"start_character":7,"end_line":91,"end_character":39},"updated":"2017-10-18 02:47:01.000000000","message":"I don\u0027t think we want to expose this auto generated name?\nonly admin should know this name and instance\u0027s user specified name is output with \u0027name\u0027","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":6062,"name":"jichenjc","email":"jichenjc@cn.ibm.com","username":"jichenjc"},"change_message_id":"9de96cd82a5aa1b571138616bb908fa03d0883e8","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":"    To deprecate the policy for below normal users attribute:."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    * ``OS-EXT-SRV-ATTR:instance_name``"},{"line_number":92,"context_line":"    * ``OS-EXT-SRV-ATTR:reservation_id``"},{"line_number":93,"context_line":"    * ``OS-EXT-SRV-ATTR:launch_index``"},{"line_number":94,"context_line":"    * ``OS-EXT-SRV-ATTR:kernel_id``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3f4b6375_8a69cf8c","line":91,"range":{"start_line":91,"start_character":7,"end_line":91,"end_character":39},"in_reply_to":"3f4b6375_075b982e","updated":"2017-10-18 06:53:16.000000000","message":"do we still support ec2 API? if yes, maybe we can expose them but I think we should not expose admin defined stuff and only used by cloud itself","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"a6e06bf4ae6acbd0401c1fd2e582fc05f9f9dcd2","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":"    To deprecate the policy for below normal users attribute:."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    * ``OS-EXT-SRV-ATTR:instance_name``"},{"line_number":92,"context_line":"    * ``OS-EXT-SRV-ATTR:reservation_id``"},{"line_number":93,"context_line":"    * ``OS-EXT-SRV-ATTR:launch_index``"},{"line_number":94,"context_line":"    * ``OS-EXT-SRV-ATTR:kernel_id``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3f4b6375_d81d5d10","line":91,"range":{"start_line":91,"start_character":7,"end_line":91,"end_character":39},"in_reply_to":"3f4b6375_8a69cf8c","updated":"2017-10-18 08:36:03.000000000","message":"we do not support ec2 APIs but question is that is this attribute admin only things ? or it is kind of unused as ec2 is gone.","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"7b1d5135cf987b4b79050e400c0e50d0bdd2ab45","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":"    To deprecate the policy for below normal users attribute:."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    * ``OS-EXT-SRV-ATTR:instance_name``"},{"line_number":92,"context_line":"    * ``OS-EXT-SRV-ATTR:reservation_id``"},{"line_number":93,"context_line":"    * ``OS-EXT-SRV-ATTR:launch_index``"},{"line_number":94,"context_line":"    * ``OS-EXT-SRV-ATTR:kernel_id``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3f4b6375_a49a776b","line":91,"range":{"start_line":91,"start_character":7,"end_line":91,"end_character":39},"in_reply_to":"3f4b6375_b876213e","updated":"2017-10-18 13:48:25.000000000","message":"This is just a name shown in the hypervisor, I think keeping it admin only makes good sense.","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"475cf98fa72aa56decab15daa67a5d5e5bababba","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":"    To deprecate the policy for below normal users attribute:."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    * ``OS-EXT-SRV-ATTR:instance_name``"},{"line_number":92,"context_line":"    * ``OS-EXT-SRV-ATTR:reservation_id``"},{"line_number":93,"context_line":"    * ``OS-EXT-SRV-ATTR:launch_index``"},{"line_number":94,"context_line":"    * ``OS-EXT-SRV-ATTR:kernel_id``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3f4b6375_7ff4085c","line":91,"range":{"start_line":91,"start_character":7,"end_line":91,"end_character":39},"in_reply_to":"3f4b6375_b876213e","updated":"2017-10-18 13:40:56.000000000","message":"Updating the API meeting discussion: [1]\n\n\u0027OS-EXT-SRV-ATTR:instance_name\u0027 is the one stored as instance name in system(hypervisor). Admin can use this to search the particular instance in system.\n\nuser_data also kind of where to show with admin only or all. If we change these admin default policy, it can impact the API users. Let\u0027s separate this (policy which are default to admin) from this proposal and proceed with proposal of deprecating the policies which are default to allow more than admin.\n\n..1 http://eavesdrop.openstack.org/meetings/nova_api/2017/nova_api.2017-10-18-13.00.log.html","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":6062,"name":"jichenjc","email":"jichenjc@cn.ibm.com","username":"jichenjc"},"change_message_id":"7c25f9216f74f8d6e464a52f716b900b8ff02f8a","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":"    To deprecate the policy for below normal users attribute:."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    * ``OS-EXT-SRV-ATTR:instance_name``"},{"line_number":92,"context_line":"    * ``OS-EXT-SRV-ATTR:reservation_id``"},{"line_number":93,"context_line":"    * ``OS-EXT-SRV-ATTR:launch_index``"},{"line_number":94,"context_line":"    * ``OS-EXT-SRV-ATTR:kernel_id``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3f4b6375_b876213e","line":91,"range":{"start_line":91,"start_character":7,"end_line":91,"end_character":39},"in_reply_to":"3f4b6375_d81d5d10","updated":"2017-10-18 08:40:02.000000000","message":"I am not sure but better to keep consistent to admin only output\n\nand at least I think this is non-end user attribute","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2cc57d87dec75d820ce0af253bee083adef65e82","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":"    To deprecate the policy for below normal users attribute:."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    * ``OS-EXT-SRV-ATTR:instance_name``"},{"line_number":92,"context_line":"    * ``OS-EXT-SRV-ATTR:reservation_id``"},{"line_number":93,"context_line":"    * ``OS-EXT-SRV-ATTR:launch_index``"},{"line_number":94,"context_line":"    * ``OS-EXT-SRV-ATTR:kernel_id``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_f6ba8abe","line":91,"range":{"start_line":91,"start_character":7,"end_line":91,"end_character":39},"in_reply_to":"5f4e5783_96291638","updated":"2017-10-18 04:49:57.000000000","message":"humm, yea this is database name generated from CONF.instance_name_template\n\n https://github.com/openstack/nova/blob/e11a8687aef527eee9f7c733db6cccd5b902afbb/nova/api/openstack/compute/extended_server_attributes.py#L51\n\nI did not find the actual use case of this. LIST server also filter by display_name only. is this admin only name and when they use this ?","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":5754,"name":"Alex Xu","email":"hejie.xu@intel.com","username":"xuhj"},"change_message_id":"0664fb4e8bb6da287221a5b55e03e5d3ff9b7bf1","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":"    To deprecate the policy for below normal users attribute:."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    * ``OS-EXT-SRV-ATTR:instance_name``"},{"line_number":92,"context_line":"    * ``OS-EXT-SRV-ATTR:reservation_id``"},{"line_number":93,"context_line":"    * ``OS-EXT-SRV-ATTR:launch_index``"},{"line_number":94,"context_line":"    * ``OS-EXT-SRV-ATTR:kernel_id``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3f4b6375_075b982e","line":91,"range":{"start_line":91,"start_character":7,"end_line":91,"end_character":39},"in_reply_to":"5f4e5783_f6ba8abe","updated":"2017-10-18 05:49:57.000000000","message":"I remember those added for ec2 compatible API.","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":5754,"name":"Alex Xu","email":"hejie.xu@intel.com","username":"xuhj"},"change_message_id":"23d470246e3713f3613b88fc86257716a0d337a1","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":"    To deprecate the policy for below normal users attribute:."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    * ``OS-EXT-SRV-ATTR:instance_name``"},{"line_number":92,"context_line":"    * ``OS-EXT-SRV-ATTR:reservation_id``"},{"line_number":93,"context_line":"    * ``OS-EXT-SRV-ATTR:launch_index``"},{"line_number":94,"context_line":"    * ``OS-EXT-SRV-ATTR:kernel_id``"},{"line_number":95,"context_line":"    * ``OS-EXT-SRV-ATTR:ramdisk_id``"},{"line_number":96,"context_line":"    * ``OS-EXT-SRV-ATTR:root_device_name``"},{"line_number":97,"context_line":"    * ``OS-EXT-SRV-ATTR:user_data``"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"* Extended Status:"},{"line_number":100,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_94dfe467","line":97,"range":{"start_line":91,"start_character":4,"end_line":97,"end_character":35},"updated":"2017-10-17 14:17:22.000000000","message":"++, those aren\u0027t admin-only attributes.","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"007c5e44abc6319a31492da69b79debb27e69a28","unresolved":false,"context_lines":[{"line_number":136,"context_line":"    to remove the policy enforcement from GET, POST server API only."},{"line_number":137,"context_line":"  * Proposal: To deprecate from GET, POST /servers API only."},{"line_number":138,"context_line":""},{"line_number":139,"context_line":"* Server Usage:"},{"line_number":140,"context_line":""},{"line_number":141,"context_line":"  * File: api/openstack/compute/server_usage.py"},{"line_number":142,"context_line":"  * Purpose: add the \u0027OS-SRV-USG:launched_at\u0027, \u0027OS-SRV-USG:terminated_at\u0027 in"},{"line_number":143,"context_line":"    GET server response."},{"line_number":144,"context_line":"  * Policies: \u0027os_compute_api:os-server-usage\u0027"},{"line_number":145,"context_line":"  * Policy Enforcement: Soft (Not Raising exception)"},{"line_number":146,"context_line":"  * Proposal: To deprecate."},{"line_number":147,"context_line":""},{"line_number":148,"context_line":"Flavor extensions:"},{"line_number":149,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_973c812f","line":146,"range":{"start_line":139,"start_character":3,"end_line":146,"end_character":27},"updated":"2017-10-17 17:27:10.000000000","message":"that is dose not seem equivalent to the usage as it wont take acount of times where i have shutdown the instance.","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"007c5e44abc6319a31492da69b79debb27e69a28","unresolved":false,"context_lines":[{"line_number":260,"context_line":"Other deployer impact"},{"line_number":261,"context_line":"---------------------"},{"line_number":262,"context_line":""},{"line_number":263,"context_line":"Policies controlling extended attributes will not control"},{"line_number":264,"context_line":"their addition in response."},{"line_number":265,"context_line":""},{"line_number":266,"context_line":"Developer impact"},{"line_number":267,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_57f7295a","line":264,"range":{"start_line":263,"start_character":1,"end_line":264,"end_character":26},"updated":"2017-10-17 17:27:10.000000000","message":"we likely would want to have a log message warning of use of these old policies and that they will no longer be used.","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2cc57d87dec75d820ce0af253bee083adef65e82","unresolved":false,"context_lines":[{"line_number":260,"context_line":"Other deployer impact"},{"line_number":261,"context_line":"---------------------"},{"line_number":262,"context_line":""},{"line_number":263,"context_line":"Policies controlling extended attributes will not control"},{"line_number":264,"context_line":"their addition in response."},{"line_number":265,"context_line":""},{"line_number":266,"context_line":"Developer impact"},{"line_number":267,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5f4e5783_16fc06b3","line":264,"range":{"start_line":263,"start_character":1,"end_line":264,"end_character":26},"in_reply_to":"5f4e5783_57f7295a","updated":"2017-10-18 04:49:57.000000000","message":"yea, log warning will be published. which should be auto logging with oslo policy spec for policy deprecated features (mentioned in \u0027Dependencies\u0027 section).","commit_id":"2f5996b8c2b4cde38725a576c90524e1b21bc73a"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"7b1d5135cf987b4b79050e400c0e50d0bdd2ab45","unresolved":false,"context_lines":[{"line_number":171,"context_line":"---------------"},{"line_number":172,"context_line":""},{"line_number":173,"context_line":"Below mentioned policies will not control the extended attribute to be added"},{"line_number":174,"context_line":"in respective APIs response. Those attributes will be added always without"},{"line_number":175,"context_line":"checking of these specific policy. Main policy for these API are still valid"},{"line_number":176,"context_line":"and enforced."},{"line_number":177,"context_line":""},{"line_number":178,"context_line":"Show \u0026 List detail server::"}],"source_content_type":"text/x-rst","patch_set":6,"id":"3f4b6375_1a69a2bd","line":175,"range":{"start_line":174,"start_character":29,"end_line":175,"end_character":34},"updated":"2017-10-18 13:48:25.000000000","message":"That is once the policy is removed, right now its just being deprecated I assume, so it we keep checking the policy for now?","commit_id":"d9e72e356fac778d872381add28f80e0f3388adf"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"c61b4ae69099e240a6a488967f37d930e5fa0b25","unresolved":false,"context_lines":[{"line_number":171,"context_line":"---------------"},{"line_number":172,"context_line":""},{"line_number":173,"context_line":"Below mentioned policies will not control the extended attribute to be added"},{"line_number":174,"context_line":"in respective APIs response. Those attributes will be added always without"},{"line_number":175,"context_line":"checking of these specific policy. Main policy for these API are still valid"},{"line_number":176,"context_line":"and enforced."},{"line_number":177,"context_line":""},{"line_number":178,"context_line":"Show \u0026 List detail server::"}],"source_content_type":"text/x-rst","patch_set":6,"id":"3f4b6375_baeccef3","line":175,"range":{"start_line":174,"start_character":29,"end_line":175,"end_character":34},"in_reply_to":"3f4b6375_1a69a2bd","updated":"2017-10-18 14:02:48.000000000","message":"right, let me clear it same way.","commit_id":"d9e72e356fac778d872381add28f80e0f3388adf"},{"author":{"_account_id":7166,"name":"Sylvain Bauza","email":"sbauza@redhat.com","username":"sbauza"},"change_message_id":"b23a52c13a0aa4d4fb01ed6b1127543117dfc17d","unresolved":false,"context_lines":[{"line_number":68,"context_line":"  * File: api/openstack/compute/extended_availability_zone.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027OS-EXT-AZ:availability_zone\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-extended-availability-zone\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft (Not Raising exception)"},{"line_number":72,"context_line":"  * Proposal: To deprecate."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"* Extended Status:"}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_038fe123","line":71,"updated":"2017-10-19 13:02:08.000000000","message":"So, just to understand correctly, which policy will support the extended field once we remove os_compute_api:os-extended-availability-zone ?\n\nSame question goes for all extended fields you provided.","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"3b32c492dc990f41fbfea4497d04c8456c3d2d1f","unresolved":false,"context_lines":[{"line_number":68,"context_line":"  * File: api/openstack/compute/extended_availability_zone.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027OS-EXT-AZ:availability_zone\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-extended-availability-zone\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft (Not Raising exception)"},{"line_number":72,"context_line":"  * Proposal: To deprecate."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"* Extended Status:"}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_d9c2d8e9","line":71,"in_reply_to":"3f4b6375_038fe123","updated":"2017-10-19 14:21:51.000000000","message":"After deprecation, there is no way to hide these things separately from their whole API.\n\nMost of this non-sense was due to our lack of microversion discovery stuff back in the day. We just said add a policy \"just in case\" for almost very extension. Was a bad idea.","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"19ee6e29460f2ed933ff92c2dc486203d2cd0143","unresolved":false,"context_lines":[{"line_number":68,"context_line":"  * File: api/openstack/compute/extended_availability_zone.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027OS-EXT-AZ:availability_zone\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-extended-availability-zone\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft (Not Raising exception)"},{"line_number":72,"context_line":"  * Proposal: To deprecate."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"* Extended Status:"}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_3e77923d","line":71,"in_reply_to":"3f4b6375_038fe123","updated":"2017-10-19 14:19:27.000000000","message":"he\u0027s not proposing any replacement, e.g. the extended fields for the GET servers API would always be part of the GET servers response going forward.","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"3b32c492dc990f41fbfea4497d04c8456c3d2d1f","unresolved":false,"context_lines":[{"line_number":68,"context_line":"  * File: api/openstack/compute/extended_availability_zone.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027OS-EXT-AZ:availability_zone\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-extended-availability-zone\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft (Not Raising exception)"},{"line_number":72,"context_line":"  * Proposal: To deprecate."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"* Extended Status:"}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_19a8701d","line":71,"in_reply_to":"3f4b6375_3e77923d","updated":"2017-10-19 14:21:51.000000000","message":"+1 after deprecation, there is no way to hide these things separately from their whole API.\n\nMost of this non-sense was due to our lack of microversion discovery stuff back in the day. We just said add a policy \"just in case\" for almost very extension. Was a bad idea.","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2276c54bdd4699d4b4963ec34f472b07eafdfcce","unresolved":false,"context_lines":[{"line_number":68,"context_line":"  * File: api/openstack/compute/extended_availability_zone.py"},{"line_number":69,"context_line":"  * Purpose: add the \u0027OS-EXT-AZ:availability_zone\u0027 in GET server response"},{"line_number":70,"context_line":"  * Policies: \u0027os_compute_api:os-extended-availability-zone\u0027"},{"line_number":71,"context_line":"  * Policy Enforcement: Soft (Not Raising exception)"},{"line_number":72,"context_line":"  * Proposal: To deprecate."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"* Extended Status:"}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_f540e909","line":71,"in_reply_to":"3f4b6375_d9c2d8e9","updated":"2017-10-19 23:50:44.000000000","message":"yea, there is no replacement and no way to hide those. Main policy i mean existing policy \u0027os_compute_api:servers:show\u0027 and \u0027os_compute_api:servers:detail\u0027 for Show and list Detail APIs.","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"19ee6e29460f2ed933ff92c2dc486203d2cd0143","unresolved":false,"context_lines":[{"line_number":140,"context_line":"    (GET /flavors/{flavor_id}/os-flavor-access), which will not be changed."},{"line_number":141,"context_line":"    Proposal here is to remove this policy enforcement from GET, POST flavor"},{"line_number":142,"context_line":"    API only."},{"line_number":143,"context_line":"  * Proposal: To deprecate for  GET, POST /flavors API only."},{"line_number":144,"context_line":""},{"line_number":145,"context_line":"Image extensions:"},{"line_number":146,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_de2f5ef4","line":143,"updated":"2017-10-19 14:19:27.000000000","message":"I\u0027m fine with this, but just note that the implementation will have to be a little different since you want to deprecate this for some APIs but not for others. We can probably figure out how to do that, but it may take a bit of extra work.","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2276c54bdd4699d4b4963ec34f472b07eafdfcce","unresolved":false,"context_lines":[{"line_number":140,"context_line":"    (GET /flavors/{flavor_id}/os-flavor-access), which will not be changed."},{"line_number":141,"context_line":"    Proposal here is to remove this policy enforcement from GET, POST flavor"},{"line_number":142,"context_line":"    API only."},{"line_number":143,"context_line":"  * Proposal: To deprecate for  GET, POST /flavors API only."},{"line_number":144,"context_line":""},{"line_number":145,"context_line":"Image extensions:"},{"line_number":146,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_5551fdd7","line":143,"in_reply_to":"3f4b6375_de2f5ef4","updated":"2017-10-19 23:50:44.000000000","message":"yea, i am waiting for oslo policy feature on this and figure out how to make it deprecated in a clear way.","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":7166,"name":"Sylvain Bauza","email":"sbauza@redhat.com","username":"sbauza"},"change_message_id":"b23a52c13a0aa4d4fb01ed6b1127543117dfc17d","unresolved":false,"context_lines":[{"line_number":173,"context_line":"Below mentioned policies will be deprecated and removed in next cycle."},{"line_number":174,"context_line":"After removal, those policies will not control the extended attribute"},{"line_number":175,"context_line":"and those attributes will be added always without checking of these"},{"line_number":176,"context_line":"specific policy. Main policy for these API are still valid"},{"line_number":177,"context_line":"and enforced."},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"Show \u0026 List detail server::"}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_c30d4991","line":176,"range":{"start_line":176,"start_character":16,"end_line":176,"end_character":28},"updated":"2017-10-19 13:02:08.000000000","message":"I guess for server details, it would be os_compute_api:os-extended-server-attributes right ?","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2276c54bdd4699d4b4963ec34f472b07eafdfcce","unresolved":false,"context_lines":[{"line_number":173,"context_line":"Below mentioned policies will be deprecated and removed in next cycle."},{"line_number":174,"context_line":"After removal, those policies will not control the extended attribute"},{"line_number":175,"context_line":"and those attributes will be added always without checking of these"},{"line_number":176,"context_line":"specific policy. Main policy for these API are still valid"},{"line_number":177,"context_line":"and enforced."},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"Show \u0026 List detail server::"}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_1565c5b5","line":176,"range":{"start_line":176,"start_character":16,"end_line":176,"end_character":28},"in_reply_to":"3f4b6375_797644db","updated":"2017-10-19 23:50:44.000000000","message":"yea as Matthew mentioned. Those are existing \"os_compute_api:servers:show\" , \"os_compute_api:servers:detail\" for Show and List detail APIs. similarly for flavor and image etc.","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"19ee6e29460f2ed933ff92c2dc486203d2cd0143","unresolved":false,"context_lines":[{"line_number":173,"context_line":"Below mentioned policies will be deprecated and removed in next cycle."},{"line_number":174,"context_line":"After removal, those policies will not control the extended attribute"},{"line_number":175,"context_line":"and those attributes will be added always without checking of these"},{"line_number":176,"context_line":"specific policy. Main policy for these API are still valid"},{"line_number":177,"context_line":"and enforced."},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"Show \u0026 List detail server::"}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_f961143b","line":176,"range":{"start_line":176,"start_character":16,"end_line":176,"end_character":28},"in_reply_to":"3f4b6375_c30d4991","updated":"2017-10-19 14:19:27.000000000","message":"No, that wouldn\u0027t be appropriate... os_compute_api:os-extended-server-attributes is admin-only by default, whereas all the attributes referenced in this spec are allowed for anyone by default.\n\nThe \"main policy\" he\u0027s refering to are e.g. \"os_compute_api:servers:show\" for the GET servers/{server_id} API.","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"3b32c492dc990f41fbfea4497d04c8456c3d2d1f","unresolved":false,"context_lines":[{"line_number":173,"context_line":"Below mentioned policies will be deprecated and removed in next cycle."},{"line_number":174,"context_line":"After removal, those policies will not control the extended attribute"},{"line_number":175,"context_line":"and those attributes will be added always without checking of these"},{"line_number":176,"context_line":"specific policy. Main policy for these API are still valid"},{"line_number":177,"context_line":"and enforced."},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"Show \u0026 List detail server::"}],"source_content_type":"text/x-rst","patch_set":7,"id":"3f4b6375_797644db","line":176,"range":{"start_line":176,"start_character":16,"end_line":176,"end_character":28},"in_reply_to":"3f4b6375_f961143b","updated":"2017-10-19 14:21:51.000000000","message":"++","commit_id":"26b4ce4ce6cfa6072e843a54e3708c34a0179ba2"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"6fa880860c395b810c5d549425db5363674c46f0","unresolved":false,"context_lines":[{"line_number":178,"context_line":""},{"line_number":179,"context_line":"Main policy here is the existing policies for Show, Detail APIs"},{"line_number":180,"context_line":"if there is any."},{"line_number":181,"context_line":"For example: "},{"line_number":182,"context_line":"GET servers/{server_id} - \"os_compute_api:servers:show\""},{"line_number":183,"context_line":"GET servers/detail - \"os_compute_api:servers:detail\""},{"line_number":184,"context_line":"POST flavors - \u0027os_compute_api:os-flavor-manage:create\u0027"}],"source_content_type":"text/x-rst","patch_set":8,"id":"3f4b6375_950ad523","line":181,"updated":"2017-10-20 01:02:42.000000000","message":"space at the end of a line","commit_id":"b7ce004d276d6fdd794a196f9bbf09909b1b1e83"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"53a9bea4621c0bdc344505f3e8a124a262897ae7","unresolved":false,"context_lines":[{"line_number":178,"context_line":""},{"line_number":179,"context_line":"Main policy here is the existing policies for Show, Detail APIs"},{"line_number":180,"context_line":"if there is any."},{"line_number":181,"context_line":"For example: "},{"line_number":182,"context_line":"GET servers/{server_id} - \"os_compute_api:servers:show\""},{"line_number":183,"context_line":"GET servers/detail - \"os_compute_api:servers:detail\""},{"line_number":184,"context_line":"POST flavors - \u0027os_compute_api:os-flavor-manage:create\u0027"}],"source_content_type":"text/x-rst","patch_set":8,"id":"3f4b6375_d0397b41","line":181,"in_reply_to":"3f4b6375_950ad523","updated":"2017-10-20 01:51:56.000000000","message":"oh, done","commit_id":"b7ce004d276d6fdd794a196f9bbf09909b1b1e83"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"989edd8aae3fe8a44a367472d239c216a2cc9d14","unresolved":false,"context_lines":[{"line_number":120,"context_line":"  * Policy Enforcement: Soft (Not Raising exception)"},{"line_number":121,"context_line":"  * Proposal: To deprecate."},{"line_number":122,"context_line":""},{"line_number":123,"context_line":"Flavor extensions:"},{"line_number":124,"context_line":""},{"line_number":125,"context_line":"* Flavor rxtx:"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"  * File: api/openstack/compute/flavor_rxtx.py"},{"line_number":128,"context_line":"  * Purpose: add the \u0027os-flavor-rxtx\u0027 in GET, POST flavor response"},{"line_number":129,"context_line":"  * Policies: \u0027os_compute_api:os-flavor-rxtx\u0027"},{"line_number":130,"context_line":"  * Policy Enforcement: Soft (Not Raising exception)"},{"line_number":131,"context_line":"  * Proposal: To deprecate."},{"line_number":132,"context_line":""},{"line_number":133,"context_line":"* Flavor Access:"},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"  * File: api/openstack/compute/flavor_access.py"},{"line_number":136,"context_line":"  * Purpose: add the \u0027os-flavor-access:is_public\u0027 in GET, POST flavor response"},{"line_number":137,"context_line":"  * Policies: \u0027os_compute_api:os-flavor-access\u0027"},{"line_number":138,"context_line":"  * Policy Enforcement: Soft (Not Raising exception)"},{"line_number":139,"context_line":"  * NOTE: This policy is used by flavor access API also"},{"line_number":140,"context_line":"    (GET /flavors/{flavor_id}/os-flavor-access), which will not be changed."},{"line_number":141,"context_line":"    Proposal here is to remove this policy enforcement from GET, POST flavor"},{"line_number":142,"context_line":"    API only."},{"line_number":143,"context_line":"  * Proposal: To deprecate for  GET, POST /flavors API only."},{"line_number":144,"context_line":""},{"line_number":145,"context_line":"Image extensions:"},{"line_number":146,"context_line":""}],"source_content_type":"text/x-rst","patch_set":9,"id":"3f4b6375_3cbedeb3","line":143,"range":{"start_line":123,"start_character":0,"end_line":143,"end_character":60},"updated":"2017-10-25 23:14:51.000000000","message":"Yup, I just ran into this when implementing PUT /flavors/{flavor_id} and couldn\u0027t figure out why the API samples for PUT were failing when I was using the same view builder code as POST, and then found the flavor access and rxtx extensions that add the other fields to the response *and* are controlled via other policy rules. Agree that this is just confusing and we should remove both the extension code so it\u0027s just in the view builders for those additional response keys and we shouldn\u0027t have separate policy rules for that stuff.","commit_id":"7af4f1f8707acd2a32881a3ee7023dd04a27f837"}]}