)]}'
{"doc/admin-guide-cloud/source/orchestration-auth-model.rst":[{"author":{"_account_id":14962,"name":"ologvinova","email":"ologvinova@mirantis.com","username":"ologvinova"},"change_message_id":"593c08d2925a4c6df9818ffd8ffa6fbbcc681968","unresolved":false,"context_lines":[{"line_number":31,"context_line":"Password authorization involves the following steps:"},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"#. A user requests stack creation, by providing a token and"},{"line_number":34,"context_line":"   username/password. The OpenStack dashboard or"},{"line_number":35,"context_line":"   python-heatclient requests the token on the user\u0027s behalf."},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"#. If the stack contains any resources that require deferred"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_8baff8e2","line":34,"updated":"2015-10-27 14:57:38.000000000","message":"If horizon is meant here, then proper name is Dashboard (w/o OpenStack preceding the name).","commit_id":"3637a4aa55bfbc462c997b47f7092c420de1112f"},{"author":{"_account_id":14962,"name":"ologvinova","email":"ologvinova@mirantis.com","username":"ologvinova"},"change_message_id":"593c08d2925a4c6df9818ffd8ffa6fbbcc681968","unresolved":false,"context_lines":[{"line_number":36,"context_line":""},{"line_number":37,"context_line":"#. If the stack contains any resources that require deferred"},{"line_number":38,"context_line":"   operations, then the orchestration engine fails its validation"},{"line_number":39,"context_line":"   checks, if the user did not provide a valid username/password."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"#. The username/password are encrypted and stored in the Orchestration"},{"line_number":42,"context_line":"   database."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_ebf78cf3","line":39,"updated":"2015-10-27 14:57:38.000000000","message":"No comma before \u0027if\u0027, please.","commit_id":"3637a4aa55bfbc462c997b47f7092c420de1112f"},{"author":{"_account_id":14962,"name":"ologvinova","email":"ologvinova@mirantis.com","username":"ologvinova"},"change_message_id":"593c08d2925a4c6df9818ffd8ffa6fbbcc681968","unresolved":false,"context_lines":[{"line_number":76,"context_line":"*trust scoped token*. This token is limited in scope,"},{"line_number":77,"context_line":"such that the trustee has limited access to those"},{"line_number":78,"context_line":"roles delegated. In addition, the trustee has effective impersonation"},{"line_number":79,"context_line":"of the trustor user, if it was selected when creating the trust."},{"line_number":80,"context_line":"For more information, see the :ref:`Identity management \u003cidentity_management\u003e`"},{"line_number":81,"context_line":"section."},{"line_number":82,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_abe4340d","line":79,"updated":"2015-10-27 14:57:38.000000000","message":"No comma before \u0027if\u0027, please.","commit_id":"3637a4aa55bfbc462c997b47f7092c420de1112f"},{"author":{"_account_id":14962,"name":"ologvinova","email":"ologvinova@mirantis.com","username":"ologvinova"},"change_message_id":"593c08d2925a4c6df9818ffd8ffa6fbbcc681968","unresolved":false,"context_lines":[{"line_number":99,"context_line":"   database."},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"#. When a deferred operation is required, the Orchestration service"},{"line_number":102,"context_line":"   retrieves the *trust id* and requests a trust scoped token which"},{"line_number":103,"context_line":"   enables the service user to impersonate the stack owner during"},{"line_number":104,"context_line":"   the deferred operation. Impersonation is helpful, for example,"},{"line_number":105,"context_line":"   so the service user can launch compute instances on"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_cbe650e8","line":102,"updated":"2015-10-27 14:57:38.000000000","message":"Could we please be consistent in naming the *trust id*? See line 74.","commit_id":"3637a4aa55bfbc462c997b47f7092c420de1112f"},{"author":{"_account_id":14962,"name":"ologvinova","email":"ologvinova@mirantis.com","username":"ologvinova"},"change_message_id":"593c08d2925a4c6df9818ffd8ffa6fbbcc681968","unresolved":false,"context_lines":[{"line_number":102,"context_line":"   retrieves the *trust id* and requests a trust scoped token which"},{"line_number":103,"context_line":"   enables the service user to impersonate the stack owner during"},{"line_number":104,"context_line":"   the deferred operation. Impersonation is helpful, for example,"},{"line_number":105,"context_line":"   so the service user can launch compute instances on"},{"line_number":106,"context_line":"   behalf of the stack owner in response to an auto-scaling event."},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"Authorization model configuration"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_abf51484","line":105,"updated":"2015-10-27 14:57:38.000000000","message":"compute -\u003e Compute","commit_id":"3637a4aa55bfbc462c997b47f7092c420de1112f"},{"author":{"_account_id":14962,"name":"ologvinova","email":"ologvinova@mirantis.com","username":"ologvinova"},"change_message_id":"593c08d2925a4c6df9818ffd8ffa6fbbcc681968","unresolved":false,"context_lines":[{"line_number":109,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":"Initially, the password authorization model was the"},{"line_number":112,"context_line":"default authorization model. Since the Kilo release, the OpenStack"},{"line_number":113,"context_line":"Identity trusts authorization model is enabled for the Orchestration"},{"line_number":114,"context_line":"service by default."},{"line_number":115,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_8b261815","line":112,"updated":"2015-10-27 14:57:38.000000000","message":"OpenStack Identity -\u003e Identity","commit_id":"3637a4aa55bfbc462c997b47f7092c420de1112f"}]}