)]}'
{"nova/policies/migrate_server.py":[{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"c3a524786142aa18a3aca4f90c86d35e66288ed1","unresolved":false,"context_lines":[{"line_number":43,"context_line":"                \u0027path\u0027: \u0027/servers/{server_id}/action (os-migrateLive)\u0027"},{"line_number":44,"context_line":"            }"},{"line_number":45,"context_line":"        ],"},{"line_number":46,"context_line":"        scope_types\u003d[\u0027system\u0027]),"},{"line_number":47,"context_line":"]"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":""}],"source_content_type":"text/x-python","patch_set":1,"id":"df33271e_077b96bd","line":46,"updated":"2020-03-31 09:47:01.000000000","message":"So... I think we need system and project scope here... but we move the default rule to SYSTEM_ADMIN, which will keep the scope check in it.\n\nThus we allow folks to relax this to a project user if they wish, but by default (once deprecations are complete) you will have to be system admin by default...\n\nWhat do you think?","commit_id":"29c184bb8e4bad81601b5c04c85b4663a58255fc"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"997c339b4241cbd4745be851298a690484d9c2dc","unresolved":false,"context_lines":[{"line_number":43,"context_line":"                \u0027path\u0027: \u0027/servers/{server_id}/action (os-migrateLive)\u0027"},{"line_number":44,"context_line":"            }"},{"line_number":45,"context_line":"        ],"},{"line_number":46,"context_line":"        scope_types\u003d[\u0027system\u0027]),"},{"line_number":47,"context_line":"]"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":""}],"source_content_type":"text/x-python","patch_set":1,"id":"df33271e_b896363d","line":46,"in_reply_to":"df33271e_077b96bd","updated":"2020-04-01 00:58:26.000000000","message":"+1. make sense of keeping system admin by default and give option to operator to ask their project scoped user to do this operation.","commit_id":"29c184bb8e4bad81601b5c04c85b4663a58255fc"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"130f084f3cf362192cc74335ab476de4e4a83e45","unresolved":false,"context_lines":[{"line_number":43,"context_line":"                \u0027path\u0027: \u0027/servers/{server_id}/action (os-migrateLive)\u0027"},{"line_number":44,"context_line":"            }"},{"line_number":45,"context_line":"        ],"},{"line_number":46,"context_line":"        scope_types\u003d[\u0027system\u0027]),"},{"line_number":47,"context_line":"]"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":""}],"source_content_type":"text/x-python","patch_set":1,"id":"df33271e_734df198","line":46,"in_reply_to":"df33271e_b896363d","updated":"2020-04-01 03:15:04.000000000","message":"along with that, to get the host to those project users, we need to make server ext attr policy (which allow host name in server resposne) also as system and project scope.\n\n -https://github.com/openstack/nova/blob/c5f3d3b73256ff0d31e1c1a972909228287c3f64/nova/policies/extended_server_attributes.py","commit_id":"29c184bb8e4bad81601b5c04c85b4663a58255fc"}]}