)]}'
{"doc/networking-guide/source/adv_config_network_rbac.rst":[{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":1,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":2,"context_line":"Fine-Grained Access Control"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"A new policy framework was added during Liberty to enable both"},{"line_number":6,"context_line":"operators and tenants to grant specific tenants access to resources."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_3d7e3baf","line":3,"updated":"2015-12-03 16:18:13.000000000","message":"The name of the file is RBAC. Why not using Role Based Access Control\" as the title of this chapter?","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":17832,"name":"Linette Williams","email":"stemke@us.ibm.com","username":"lwilliams"},"change_message_id":"5610d43c836a98af15ce10fe13dbaebd39252a60","unresolved":false,"context_lines":[{"line_number":1,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":2,"context_line":"Fine-Grained Access Control"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"A new policy framework was added during Liberty to enable both"},{"line_number":6,"context_line":"operators and tenants to grant specific tenants access to resources."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_e99d4e5a","line":3,"in_reply_to":"7a740942_3d7e3baf","updated":"2015-12-03 17:44:30.000000000","message":"I agree with Christian.  Matching the title and file name also helps with SEO.","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":1,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":2,"context_line":"Fine-Grained Access Control"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"A new policy framework was added during Liberty to enable both"},{"line_number":6,"context_line":"operators and tenants to grant specific tenants access to resources."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_b73e2626","line":3,"in_reply_to":"7a740942_e99d4e5a","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":8,"context_line":"this feature is regular port creation permissions on networks."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Sharing a Network with Specific Tenants"},{"line_number":12,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":13,"context_line":"Sharing a network with a specific tenant is accomplished by creating"},{"line_number":14,"context_line":"a policy entry that permits the target tenant the ``access_as_shared``"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_9dca81a0","line":11,"updated":"2015-12-04 22:37:17.000000000","message":"The convention is for sentence-style capitalization for headings, so:\n\n\"Sharing a network with specific tenants\"","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":8,"context_line":"this feature is regular port creation permissions on networks."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Sharing a Network with Specific Tenants"},{"line_number":12,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":13,"context_line":"Sharing a network with a specific tenant is accomplished by creating"},{"line_number":14,"context_line":"a policy entry that permits the target tenant the ``access_as_shared``"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_b725c609","line":11,"in_reply_to":"7a740942_9dca81a0","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":9,"context_line":""},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Sharing a Network with Specific Tenants"},{"line_number":12,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":13,"context_line":"Sharing a network with a specific tenant is accomplished by creating"},{"line_number":14,"context_line":"a policy entry that permits the target tenant the ``access_as_shared``"},{"line_number":15,"context_line":"action on that network."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_1d0451be","line":12,"updated":"2015-12-04 22:37:17.000000000","message":"Need a new line after the underline","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":9,"context_line":""},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Sharing a Network with Specific Tenants"},{"line_number":12,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":13,"context_line":"Sharing a network with a specific tenant is accomplished by creating"},{"line_number":14,"context_line":"a policy entry that permits the target tenant the ``access_as_shared``"},{"line_number":15,"context_line":"action on that network."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_771bdeca","line":12,"in_reply_to":"7a740942_1d0451be","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":14,"context_line":"a policy entry that permits the target tenant the ``access_as_shared``"},{"line_number":15,"context_line":"action on that network."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"First, we create a network we want to share::"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"    $ neutron net-create secret_network"},{"line_number":20,"context_line":"    Created a new network:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_bda30b4f","line":17,"updated":"2015-12-03 16:18:13.000000000","message":"Use code-block directive.","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":14,"context_line":"a policy entry that permits the target tenant the ``access_as_shared``"},{"line_number":15,"context_line":"action on that network."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"First, we create a network we want to share::"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"    $ neutron net-create secret_network"},{"line_number":20,"context_line":"    Created a new network:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_577fc2aa","line":17,"in_reply_to":"7a740942_bda30b4f","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":38,"context_line":""},{"line_number":39,"context_line":"Now we create the policy entry using the ``rbac-create`` command (In"},{"line_number":40,"context_line":"this example, the ID of the tenant we want to share with is"},{"line_number":41,"context_line":"``e28769db97d9449da658bc6931fcb683``)::"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    $ neutron rbac-create --target-tenant e28769db97d9449da658bc6931fcb683 \\"},{"line_number":44,"context_line":"      --action access_as_shared --type network 6532a265-43fb-4c8c-8edb-e26b39f2277c"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_5d21794c","line":41,"updated":"2015-12-04 22:37:17.000000000","message":".. code-block:: console needed for this section as above","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":38,"context_line":""},{"line_number":39,"context_line":"Now we create the policy entry using the ``rbac-create`` command (In"},{"line_number":40,"context_line":"this example, the ID of the tenant we want to share with is"},{"line_number":41,"context_line":"``e28769db97d9449da658bc6931fcb683``)::"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    $ neutron rbac-create --target-tenant e28769db97d9449da658bc6931fcb683 \\"},{"line_number":44,"context_line":"      --action access_as_shared --type network 6532a265-43fb-4c8c-8edb-e26b39f2277c"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_174cda9c","line":41,"in_reply_to":"7a740942_5d21794c","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":67,"context_line":""},{"line_number":68,"context_line":"To remove access for that tenant, just delete the policy that allows"},{"line_number":69,"context_line":"it using the ``rbac-delete`` command::"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"    $ neutron rbac-delete 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":72,"context_line":"    Deleted rbac_policy: 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":73,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_3d16edf1","line":70,"updated":"2015-12-04 22:37:17.000000000","message":".. code-block:: console..","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":67,"context_line":""},{"line_number":68,"context_line":"To remove access for that tenant, just delete the policy that allows"},{"line_number":69,"context_line":"it using the ``rbac-delete`` command::"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"    $ neutron rbac-delete 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":72,"context_line":"    Deleted rbac_policy: 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":73,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_3751d636","line":70,"in_reply_to":"7a740942_3d16edf1","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":73,"context_line":""},{"line_number":74,"context_line":"If that tenant has ports on the network, the server will prevent the"},{"line_number":75,"context_line":"policy from being deleted until::"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"    $ neutron rbac-delete 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":78,"context_line":"    RBAC policy on object 6532a265-43fb-4c8c-8edb-e26b39f2277c cannot be removed because other objects depend on it."},{"line_number":79,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_9ddda144","line":76,"updated":"2015-12-04 22:37:17.000000000","message":".. code-block:: console","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":73,"context_line":""},{"line_number":74,"context_line":"If that tenant has ports on the network, the server will prevent the"},{"line_number":75,"context_line":"policy from being deleted until::"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"    $ neutron rbac-delete 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":78,"context_line":"    RBAC policy on object 6532a265-43fb-4c8c-8edb-e26b39f2277c cannot be removed because other objects depend on it."},{"line_number":79,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_9760ca02","line":76,"in_reply_to":"7a740942_9ddda144","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"2e8d9eb3ae0dbfe5756a13104eec8564d1aa17a5","unresolved":false,"context_lines":[{"line_number":75,"context_line":"policy from being deleted until::"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"    $ neutron rbac-delete 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":78,"context_line":"    RBAC policy on object 6532a265-43fb-4c8c-8edb-e26b39f2277c cannot be removed because other objects depend on it."},{"line_number":79,"context_line":""},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"This process can be repeated any number of times to share a network"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_20dd47e0","line":78,"updated":"2015-12-07 02:49:58.000000000","message":"Wrap the text here to the 79 characters to stop this weird breaking","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":75,"context_line":"policy from being deleted until::"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"    $ neutron rbac-delete 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":78,"context_line":"    RBAC policy on object 6532a265-43fb-4c8c-8edb-e26b39f2277c cannot be removed because other objects depend on it."},{"line_number":79,"context_line":""},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"This process can be repeated any number of times to share a network"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_7753de39","line":78,"in_reply_to":"7a740942_20dd47e0","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":77,"context_line":"    $ neutron rbac-delete 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":78,"context_line":"    RBAC policy on object 6532a265-43fb-4c8c-8edb-e26b39f2277c cannot be removed because other objects depend on it."},{"line_number":79,"context_line":""},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"This process can be repeated any number of times to share a network"},{"line_number":82,"context_line":"with an arbitrary number of tenants."},{"line_number":83,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_687cff20","line":80,"updated":"2015-12-03 16:18:13.000000000","message":"Only 1 new line here.","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":77,"context_line":"    $ neutron rbac-delete 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":78,"context_line":"    RBAC policy on object 6532a265-43fb-4c8c-8edb-e26b39f2277c cannot be removed because other objects depend on it."},{"line_number":79,"context_line":""},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"This process can be repeated any number of times to share a network"},{"line_number":82,"context_line":"with an arbitrary number of tenants."},{"line_number":83,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_d73892f0","line":80,"in_reply_to":"7a740942_687cff20","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":80,"context_line":""},{"line_number":81,"context_line":"This process can be repeated any number of times to share a network"},{"line_number":82,"context_line":"with an arbitrary number of tenants."},{"line_number":83,"context_line":""},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"How the \u0027shared\u0027 Flag Relates to these Entries"},{"line_number":86,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_088d3b31","line":83,"updated":"2015-12-03 16:18:13.000000000","message":"Only 1 new line here.","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":80,"context_line":""},{"line_number":81,"context_line":"This process can be repeated any number of times to share a network"},{"line_number":82,"context_line":"with an arbitrary number of tenants."},{"line_number":83,"context_line":""},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"How the \u0027shared\u0027 Flag Relates to these Entries"},{"line_number":86,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_17337a15","line":83,"in_reply_to":"7a740942_088d3b31","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":82,"context_line":"with an arbitrary number of tenants."},{"line_number":83,"context_line":""},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"How the \u0027shared\u0027 Flag Relates to these Entries"},{"line_number":86,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":87,"context_line":"As introduced in other guide entries, Neutron provides a means of"},{"line_number":88,"context_line":"making a network available to every tenant. This is accomplished"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_286cb79b","line":85,"updated":"2015-12-03 16:18:13.000000000","message":"flag relates to these entries","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":82,"context_line":"with an arbitrary number of tenants."},{"line_number":83,"context_line":""},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"How the \u0027shared\u0027 Flag Relates to these Entries"},{"line_number":86,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":87,"context_line":"As introduced in other guide entries, Neutron provides a means of"},{"line_number":88,"context_line":"making a network available to every tenant. This is accomplished"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_772afe91","line":85,"in_reply_to":"7a740942_286cb79b","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":83,"context_line":""},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"How the \u0027shared\u0027 Flag Relates to these Entries"},{"line_number":86,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":87,"context_line":"As introduced in other guide entries, Neutron provides a means of"},{"line_number":88,"context_line":"making a network available to every tenant. This is accomplished"},{"line_number":89,"context_line":"using the ``shared`` flag on the network::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_a825075d","line":86,"updated":"2015-12-03 16:18:13.000000000","message":"Add a newline after this one.","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":83,"context_line":""},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"How the \u0027shared\u0027 Flag Relates to these Entries"},{"line_number":86,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":87,"context_line":"As introduced in other guide entries, Neutron provides a means of"},{"line_number":88,"context_line":"making a network available to every tenant. This is accomplished"},{"line_number":89,"context_line":"using the ``shared`` flag on the network::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_371f966d","line":86,"in_reply_to":"7a740942_a825075d","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":84,"context_line":""},{"line_number":85,"context_line":"How the \u0027shared\u0027 Flag Relates to these Entries"},{"line_number":86,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":87,"context_line":"As introduced in other guide entries, Neutron provides a means of"},{"line_number":88,"context_line":"making a network available to every tenant. This is accomplished"},{"line_number":89,"context_line":"using the ``shared`` flag on the network::"},{"line_number":90,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_5d7df91a","line":87,"updated":"2015-12-04 22:37:17.000000000","message":"lowercase for service names, so: neutron","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":84,"context_line":""},{"line_number":85,"context_line":"How the \u0027shared\u0027 Flag Relates to these Entries"},{"line_number":86,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":87,"context_line":"As introduced in other guide entries, Neutron provides a means of"},{"line_number":88,"context_line":"making a network available to every tenant. This is accomplished"},{"line_number":89,"context_line":"using the ``shared`` flag on the network::"},{"line_number":90,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_f714ae4d","line":87,"in_reply_to":"7a740942_5d7df91a","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":87,"context_line":"As introduced in other guide entries, Neutron provides a means of"},{"line_number":88,"context_line":"making a network available to every tenant. This is accomplished"},{"line_number":89,"context_line":"using the ``shared`` flag on the network::"},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    $ neutron net-create global_network --shared"},{"line_number":92,"context_line":"    Created a new network:"},{"line_number":93,"context_line":"    +---------------------------+--------------------------------------+"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_5de899e2","line":90,"updated":"2015-12-04 22:37:17.000000000","message":".. code-block:: console","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":87,"context_line":"As introduced in other guide entries, Neutron provides a means of"},{"line_number":88,"context_line":"making a network available to every tenant. This is accomplished"},{"line_number":89,"context_line":"using the ``shared`` flag on the network::"},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"    $ neutron net-create global_network --shared"},{"line_number":92,"context_line":"    Created a new network:"},{"line_number":93,"context_line":"    +---------------------------+--------------------------------------+"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_970e8a39","line":90,"in_reply_to":"7a740942_5de899e2","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":110,"context_line":""},{"line_number":111,"context_line":"This is the equivalent of creating a policy on the network that permits"},{"line_number":112,"context_line":"every tenant to perform the action ``access_as_shared`` on that network."},{"line_number":113,"context_line":"In fact, Neutron treats them as the same thing, so we should"},{"line_number":114,"context_line":"be able to see a policy entry for that network using the ``rbac-list``"},{"line_number":115,"context_line":"command::"},{"line_number":116,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_9db4c1f2","line":113,"updated":"2015-12-04 22:37:17.000000000","message":"neutron","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":110,"context_line":""},{"line_number":111,"context_line":"This is the equivalent of creating a policy on the network that permits"},{"line_number":112,"context_line":"every tenant to perform the action ``access_as_shared`` on that network."},{"line_number":113,"context_line":"In fact, Neutron treats them as the same thing, so we should"},{"line_number":114,"context_line":"be able to see a policy entry for that network using the ``rbac-list``"},{"line_number":115,"context_line":"command::"},{"line_number":116,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_77019e05","line":113,"in_reply_to":"7a740942_9db4c1f2","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":113,"context_line":"In fact, Neutron treats them as the same thing, so we should"},{"line_number":114,"context_line":"be able to see a policy entry for that network using the ``rbac-list``"},{"line_number":115,"context_line":"command::"},{"line_number":116,"context_line":""},{"line_number":117,"context_line":"    $ neutron rbac-list"},{"line_number":118,"context_line":"    +--------------------------------------+--------------------------------------+"},{"line_number":119,"context_line":"    | id                                   | object_id                            |"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_1df211d3","line":116,"updated":"2015-12-04 22:37:17.000000000","message":".. code-block:: console","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":113,"context_line":"In fact, Neutron treats them as the same thing, so we should"},{"line_number":114,"context_line":"be able to see a policy entry for that network using the ``rbac-list``"},{"line_number":115,"context_line":"command::"},{"line_number":116,"context_line":""},{"line_number":117,"context_line":"    $ neutron rbac-list"},{"line_number":118,"context_line":"    +--------------------------------------+--------------------------------------+"},{"line_number":119,"context_line":"    | id                                   | object_id                            |"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_a906ca19","line":116,"in_reply_to":"7a740942_1df211d3","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":122,"context_line":"    +--------------------------------------+--------------------------------------+"},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"Then we can use the ``rbac-show`` command to see the details::"},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"    $ neutron rbac-show fcc63ae1-c56e-449d-8fb0-4f49f3cc8b55"},{"line_number":127,"context_line":"    +---------------+--------------------------------------+"},{"line_number":128,"context_line":"    | Field         | Value                                |"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_3ded8def","line":125,"updated":"2015-12-04 22:37:17.000000000","message":".. code-block:: console","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":122,"context_line":"    +--------------------------------------+--------------------------------------+"},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"Then we can use the ``rbac-show`` command to see the details::"},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"    $ neutron rbac-show fcc63ae1-c56e-449d-8fb0-4f49f3cc8b55"},{"line_number":127,"context_line":"    +---------------+--------------------------------------+"},{"line_number":128,"context_line":"    | Field         | Value                                |"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_e9005203","line":125,"in_reply_to":"7a740942_3ded8def","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":140,"context_line":"to target_tenant ``*``, which is a wildcard that represents all tenants."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"As of Liberty, the ``shared`` flag is just a mapping to the underlying"},{"line_number":143,"context_line":"RBAC policies for a network. Setting the flag to True on a network"},{"line_number":144,"context_line":"creates a wildcard RBAC entry. Setting it to False removes the wildcard"},{"line_number":145,"context_line":"entry."},{"line_number":146,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_a8aae783","line":143,"updated":"2015-12-03 16:18:13.000000000","message":"``True``","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":140,"context_line":"to target_tenant ``*``, which is a wildcard that represents all tenants."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"As of Liberty, the ``shared`` flag is just a mapping to the underlying"},{"line_number":143,"context_line":"RBAC policies for a network. Setting the flag to True on a network"},{"line_number":144,"context_line":"creates a wildcard RBAC entry. Setting it to False removes the wildcard"},{"line_number":145,"context_line":"entry."},{"line_number":146,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_c92236a3","line":143,"in_reply_to":"7a740942_a8aae783","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":141,"context_line":""},{"line_number":142,"context_line":"As of Liberty, the ``shared`` flag is just a mapping to the underlying"},{"line_number":143,"context_line":"RBAC policies for a network. Setting the flag to True on a network"},{"line_number":144,"context_line":"creates a wildcard RBAC entry. Setting it to False removes the wildcard"},{"line_number":145,"context_line":"entry."},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"When a net-list or net-show is done, the shared flag is calculated"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_c8af3393","line":144,"updated":"2015-12-03 16:18:13.000000000","message":"``False``","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":141,"context_line":""},{"line_number":142,"context_line":"As of Liberty, the ``shared`` flag is just a mapping to the underlying"},{"line_number":143,"context_line":"RBAC policies for a network. Setting the flag to True on a network"},{"line_number":144,"context_line":"creates a wildcard RBAC entry. Setting it to False removes the wildcard"},{"line_number":145,"context_line":"entry."},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"When a net-list or net-show is done, the shared flag is calculated"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_693c62c8","line":144,"in_reply_to":"7a740942_c8af3393","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":144,"context_line":"creates a wildcard RBAC entry. Setting it to False removes the wildcard"},{"line_number":145,"context_line":"entry."},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"When a net-list or net-show is done, the shared flag is calculated"},{"line_number":148,"context_line":"by the server based on the calling tenant and the RBAC entries for"},{"line_number":149,"context_line":"each network. If there is a wildcard entry, the shared flag is always"},{"line_number":150,"context_line":"set to True. If there are only entries that share with specific"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_c8b893e8","line":147,"updated":"2015-12-03 16:18:13.000000000","message":"``net-list`` ``net-show``","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":144,"context_line":"creates a wildcard RBAC entry. Setting it to False removes the wildcard"},{"line_number":145,"context_line":"entry."},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"When a net-list or net-show is done, the shared flag is calculated"},{"line_number":148,"context_line":"by the server based on the calling tenant and the RBAC entries for"},{"line_number":149,"context_line":"each network. If there is a wildcard entry, the shared flag is always"},{"line_number":150,"context_line":"set to True. If there are only entries that share with specific"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_a9548afd","line":147,"in_reply_to":"7a740942_c8b893e8","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":147,"context_line":"When a net-list or net-show is done, the shared flag is calculated"},{"line_number":148,"context_line":"by the server based on the calling tenant and the RBAC entries for"},{"line_number":149,"context_line":"each network. If there is a wildcard entry, the shared flag is always"},{"line_number":150,"context_line":"set to True. If there are only entries that share with specific"},{"line_number":151,"context_line":"tenants, only the tenants the network is shared to will see the"},{"line_number":152,"context_line":"flag as True and the rest will see the flag as False."},{"line_number":153,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_88cb6b72","line":150,"updated":"2015-12-03 16:18:13.000000000","message":"``True``","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":147,"context_line":"When a net-list or net-show is done, the shared flag is calculated"},{"line_number":148,"context_line":"by the server based on the calling tenant and the RBAC entries for"},{"line_number":149,"context_line":"each network. If there is a wildcard entry, the shared flag is always"},{"line_number":150,"context_line":"set to True. If there are only entries that share with specific"},{"line_number":151,"context_line":"tenants, only the tenants the network is shared to will see the"},{"line_number":152,"context_line":"flag as True and the rest will see the flag as False."},{"line_number":153,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_c959d636","line":150,"in_reply_to":"7a740942_88cb6b72","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":149,"context_line":"each network. If there is a wildcard entry, the shared flag is always"},{"line_number":150,"context_line":"set to True. If there are only entries that share with specific"},{"line_number":151,"context_line":"tenants, only the tenants the network is shared to will see the"},{"line_number":152,"context_line":"flag as True and the rest will see the flag as False."},{"line_number":153,"context_line":""},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Preventing Regular Tenants from Sharing Networks with each other"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_28c83774","line":152,"updated":"2015-12-03 16:18:13.000000000","message":"``True`` ``False``","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":149,"context_line":"each network. If there is a wildcard entry, the shared flag is always"},{"line_number":150,"context_line":"set to True. If there are only entries that share with specific"},{"line_number":151,"context_line":"tenants, only the tenants the network is shared to will see the"},{"line_number":152,"context_line":"flag as True and the rest will see the flag as False."},{"line_number":153,"context_line":""},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Preventing Regular Tenants from Sharing Networks with each other"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_69430243","line":152,"in_reply_to":"7a740942_28c83774","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":152,"context_line":"flag as True and the rest will see the flag as False."},{"line_number":153,"context_line":""},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Preventing Regular Tenants from Sharing Networks with each other"},{"line_number":156,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":157,"context_line":"The default policy.json shipped with Neutron will not allow regular"},{"line_number":158,"context_line":"tenants to share networks with every tenant using a wildcard; however,"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_1dbf71fc","line":155,"updated":"2015-12-04 22:37:17.000000000","message":"\"Preventing regular tenants from sharing networks with each other\"","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":152,"context_line":"flag as True and the rest will see the flag as False."},{"line_number":153,"context_line":""},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Preventing Regular Tenants from Sharing Networks with each other"},{"line_number":156,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":157,"context_line":"The default policy.json shipped with Neutron will not allow regular"},{"line_number":158,"context_line":"tenants to share networks with every tenant using a wildcard; however,"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_696a22b5","line":155,"in_reply_to":"7a740942_1dbf71fc","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":153,"context_line":""},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Preventing Regular Tenants from Sharing Networks with each other"},{"line_number":156,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":157,"context_line":"The default policy.json shipped with Neutron will not allow regular"},{"line_number":158,"context_line":"tenants to share networks with every tenant using a wildcard; however,"},{"line_number":159,"context_line":"it will allow them to share networks with specific tenant IDs."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_9dab6189","line":156,"updated":"2015-12-04 22:37:17.000000000","message":"New line after underline","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":153,"context_line":""},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Preventing Regular Tenants from Sharing Networks with each other"},{"line_number":156,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":157,"context_line":"The default policy.json shipped with Neutron will not allow regular"},{"line_number":158,"context_line":"tenants to share networks with every tenant using a wildcard; however,"},{"line_number":159,"context_line":"it will allow them to share networks with specific tenant IDs."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_89674ee8","line":156,"in_reply_to":"7a740942_9dab6189","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Preventing Regular Tenants from Sharing Networks with each other"},{"line_number":156,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":157,"context_line":"The default policy.json shipped with Neutron will not allow regular"},{"line_number":158,"context_line":"tenants to share networks with every tenant using a wildcard; however,"},{"line_number":159,"context_line":"it will allow them to share networks with specific tenant IDs."},{"line_number":160,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_08d8db52","line":157,"updated":"2015-12-03 16:18:13.000000000","message":"``policy.json``","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Preventing Regular Tenants from Sharing Networks with each other"},{"line_number":156,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":157,"context_line":"The default policy.json shipped with Neutron will not allow regular"},{"line_number":158,"context_line":"tenants to share networks with every tenant using a wildcard; however,"},{"line_number":159,"context_line":"it will allow them to share networks with specific tenant IDs."},{"line_number":160,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_7d91d551","line":157,"updated":"2015-12-04 22:37:17.000000000","message":"neutron","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Preventing Regular Tenants from Sharing Networks with each other"},{"line_number":156,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":157,"context_line":"The default policy.json shipped with Neutron will not allow regular"},{"line_number":158,"context_line":"tenants to share networks with every tenant using a wildcard; however,"},{"line_number":159,"context_line":"it will allow them to share networks with specific tenant IDs."},{"line_number":160,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_495de613","line":157,"in_reply_to":"7a740942_08d8db52","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Preventing Regular Tenants from Sharing Networks with each other"},{"line_number":156,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":157,"context_line":"The default policy.json shipped with Neutron will not allow regular"},{"line_number":158,"context_line":"tenants to share networks with every tenant using a wildcard; however,"},{"line_number":159,"context_line":"it will allow them to share networks with specific tenant IDs."},{"line_number":160,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_e99cd2c1","line":157,"in_reply_to":"7a740942_7d91d551","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":159,"context_line":"it will allow them to share networks with specific tenant IDs."},{"line_number":160,"context_line":""},{"line_number":161,"context_line":"If an operator wants to prevent normal tenants from doing this, the"},{"line_number":162,"context_line":"\"create_rbac_policy:\" entry in policy.json can be adjusted from \"\""},{"line_number":163,"context_line":"to \"rule:admin_only\"."},{"line_number":164,"context_line":""},{"line_number":165,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_28f117ce","line":162,"updated":"2015-12-03 16:18:13.000000000","message":"``create_rbac_policy``","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":159,"context_line":"it will allow them to share networks with specific tenant IDs."},{"line_number":160,"context_line":""},{"line_number":161,"context_line":"If an operator wants to prevent normal tenants from doing this, the"},{"line_number":162,"context_line":"\"create_rbac_policy:\" entry in policy.json can be adjusted from \"\""},{"line_number":163,"context_line":"to \"rule:admin_only\"."},{"line_number":164,"context_line":""},{"line_number":165,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_69b1c246","line":162,"in_reply_to":"7a740942_28f117ce","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"8391561d4eb4ffc617f65d7b080ce7b2f74d9d6c","unresolved":false,"context_lines":[{"line_number":160,"context_line":""},{"line_number":161,"context_line":"If an operator wants to prevent normal tenants from doing this, the"},{"line_number":162,"context_line":"\"create_rbac_policy:\" entry in policy.json can be adjusted from \"\""},{"line_number":163,"context_line":"to \"rule:admin_only\"."},{"line_number":164,"context_line":""},{"line_number":165,"context_line":""},{"line_number":166,"context_line":"Limitations"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_08bf7bd1","line":163,"updated":"2015-12-03 16:18:13.000000000","message":"``rule:admin_only``","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":160,"context_line":""},{"line_number":161,"context_line":"If an operator wants to prevent normal tenants from doing this, the"},{"line_number":162,"context_line":"\"create_rbac_policy:\" entry in policy.json can be adjusted from \"\""},{"line_number":163,"context_line":"to \"rule:admin_only\"."},{"line_number":164,"context_line":""},{"line_number":165,"context_line":""},{"line_number":166,"context_line":"Limitations"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_89ae6ee4","line":163,"in_reply_to":"7a740942_08bf7bd1","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"f2c8ee50edb26117d8903da2de99eb1e1f301111","unresolved":false,"context_lines":[{"line_number":168,"context_line":""},{"line_number":169,"context_line":"A non-admin tenant that shares a network with another tenant using this"},{"line_number":170,"context_line":"feature will not be able to see or delete the ports created by the other"},{"line_number":171,"context_line":"tenant. This is because the Neutron database operations automatically limit"},{"line_number":172,"context_line":"database queries to objects owned by the requesting tenant unless that"},{"line_number":173,"context_line":"tenant is an admin or service tenant. This issue is being tracked by the"},{"line_number":174,"context_line":"following bug: https://bugs.launchpad.net/neutron/+bug/1498790"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_3d9b4d74","line":171,"updated":"2015-12-04 22:37:17.000000000","message":"neutron","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"950f956f8457da5869a7836643d08014c38ab681","unresolved":false,"context_lines":[{"line_number":168,"context_line":""},{"line_number":169,"context_line":"A non-admin tenant that shares a network with another tenant using this"},{"line_number":170,"context_line":"feature will not be able to see or delete the ports created by the other"},{"line_number":171,"context_line":"tenant. This is because the Neutron database operations automatically limit"},{"line_number":172,"context_line":"database queries to objects owned by the requesting tenant unless that"},{"line_number":173,"context_line":"tenant is an admin or service tenant. This issue is being tracked by the"},{"line_number":174,"context_line":"following bug: https://bugs.launchpad.net/neutron/+bug/1498790"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_29b73a3b","line":171,"in_reply_to":"7a740942_3d9b4d74","updated":"2015-12-08 01:24:35.000000000","message":"Done","commit_id":"e72f34707fc8034a0cfc24f5f2b20563720fb5c2"},{"author":{"_account_id":16237,"name":"venkatamahesh","email":"venkatamaheshkotha@gmail.com","username":"venkatamahesh"},"change_message_id":"32aae8c737f653e43f712ed2b00df53bca7ec714","unresolved":false,"context_lines":[{"line_number":1,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":2,"context_line":"Role-Basec Access Control for Networks"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"A new policy framework was added during Liberty to enable both"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a740942_64ec602a","line":2,"updated":"2015-12-08 15:55:12.000000000","message":"Role-Based","commit_id":"032141b0df7e38e8078833e91fa9ae0d27b94690"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"1369003033b0473ce4032822b50c1069cfb26dac","unresolved":false,"context_lines":[{"line_number":1,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":2,"context_line":"Role-Basec Access Control for Networks"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"A new policy framework was added during Liberty to enable both"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a740942_ce7f5f13","line":2,"in_reply_to":"7a740942_64ec602a","updated":"2015-12-08 22:28:37.000000000","message":"Done","commit_id":"032141b0df7e38e8078833e91fa9ae0d27b94690"},{"author":{"_account_id":16237,"name":"venkatamahesh","email":"venkatamaheshkotha@gmail.com","username":"venkatamahesh"},"change_message_id":"32aae8c737f653e43f712ed2b00df53bca7ec714","unresolved":false,"context_lines":[{"line_number":17,"context_line":""},{"line_number":18,"context_line":"First, we create a network we want to share:"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"   .. code-block:: console"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"      $ neutron net-create secret_network"},{"line_number":23,"context_line":"      Created a new network:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a740942_e4ea90da","line":20,"updated":"2015-12-08 15:55:12.000000000","message":"remove the space before ..code-block\nhttp://docs-draft.openstack.org/05/252705/2/check/gate-openstack-manuals-tox-doc-publish-checkbuild/d7fe1ba//publish-docs/networking-guide/adv_config_network_rbac.html","commit_id":"032141b0df7e38e8078833e91fa9ae0d27b94690"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"1369003033b0473ce4032822b50c1069cfb26dac","unresolved":false,"context_lines":[{"line_number":17,"context_line":""},{"line_number":18,"context_line":"First, we create a network we want to share:"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"   .. code-block:: console"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"      $ neutron net-create secret_network"},{"line_number":23,"context_line":"      Created a new network:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a740942_cefbdf77","line":20,"in_reply_to":"7a740942_e4ea90da","updated":"2015-12-08 22:28:37.000000000","message":"Done","commit_id":"032141b0df7e38e8078833e91fa9ae0d27b94690"},{"author":{"_account_id":16237,"name":"venkatamahesh","email":"venkatamaheshkotha@gmail.com","username":"venkatamahesh"},"change_message_id":"32aae8c737f653e43f712ed2b00df53bca7ec714","unresolved":false,"context_lines":[{"line_number":43,"context_line":"this example, the ID of the project we want to share with is"},{"line_number":44,"context_line":"``e28769db97d9449da658bc6931fcb683``):"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"   .. code-block:: console"},{"line_number":47,"context_line":""},{"line_number":48,"context_line":"      $ neutron rbac-create --target-tenant e28769db97d9449da658bc6931fcb683 \\"},{"line_number":49,"context_line":"        --action access_as_shared --type network 6532a265-43fb-4c8c-8edb-e26b39f2277c"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a740942_e498507a","line":46,"updated":"2015-12-08 15:55:12.000000000","message":"ditto","commit_id":"032141b0df7e38e8078833e91fa9ae0d27b94690"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"1369003033b0473ce4032822b50c1069cfb26dac","unresolved":false,"context_lines":[{"line_number":43,"context_line":"this example, the ID of the project we want to share with is"},{"line_number":44,"context_line":"``e28769db97d9449da658bc6931fcb683``):"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"   .. code-block:: console"},{"line_number":47,"context_line":""},{"line_number":48,"context_line":"      $ neutron rbac-create --target-tenant e28769db97d9449da658bc6931fcb683 \\"},{"line_number":49,"context_line":"        --action access_as_shared --type network 6532a265-43fb-4c8c-8edb-e26b39f2277c"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a740942_8ef15797","line":46,"in_reply_to":"7a740942_e498507a","updated":"2015-12-08 22:28:37.000000000","message":"Done","commit_id":"032141b0df7e38e8078833e91fa9ae0d27b94690"},{"author":{"_account_id":16237,"name":"venkatamahesh","email":"venkatamaheshkotha@gmail.com","username":"venkatamahesh"},"change_message_id":"32aae8c737f653e43f712ed2b00df53bca7ec714","unresolved":false,"context_lines":[{"line_number":73,"context_line":"To remove access for that project, just delete the policy that allows"},{"line_number":74,"context_line":"it using the ``rbac-delete`` command:"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"   .. code-block:: console"},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"      $ neutron rbac-delete 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":79,"context_line":"      Deleted rbac_policy: 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a740942_64b9c0cb","line":76,"updated":"2015-12-08 15:55:12.000000000","message":"ditto for all ..code-block in this page","commit_id":"032141b0df7e38e8078833e91fa9ae0d27b94690"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"1369003033b0473ce4032822b50c1069cfb26dac","unresolved":false,"context_lines":[{"line_number":73,"context_line":"To remove access for that project, just delete the policy that allows"},{"line_number":74,"context_line":"it using the ``rbac-delete`` command:"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"   .. code-block:: console"},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"      $ neutron rbac-delete 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":79,"context_line":"      Deleted rbac_policy: 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a740942_aeec53bb","line":76,"in_reply_to":"7a740942_64b9c0cb","updated":"2015-12-08 22:28:37.000000000","message":"Done","commit_id":"032141b0df7e38e8078833e91fa9ae0d27b94690"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"2919f08f4d66d11cad3e5cfefaedc96fa654d95d","unresolved":false,"context_lines":[{"line_number":1,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":2,"context_line":"Role-Based Access Control for Networks"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"A new policy framework was added during Liberty to enable both"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_2ff5bdeb","line":2,"updated":"2015-12-08 23:42:30.000000000","message":"nit: networks","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"43c30d772324c500cc75e435118a07aa5a84bdf9","unresolved":false,"context_lines":[{"line_number":1,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":2,"context_line":"Role-Based Access Control for Networks"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"A new policy framework was added during Liberty to enable both"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_24d39f61","line":2,"in_reply_to":"7a740942_2ff5bdeb","updated":"2015-12-09 00:31:26.000000000","message":"Done","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"2919f08f4d66d11cad3e5cfefaedc96fa654d95d","unresolved":false,"context_lines":[{"line_number":39,"context_line":"      | tenant_id                 | de56db175c1d48b0bbe72f09a24a3b66     |"},{"line_number":40,"context_line":"      +---------------------------+--------------------------------------+"},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Now we create the policy entry using the ``rbac-create`` command (In"},{"line_number":43,"context_line":"this example, the ID of the project we want to share with is"},{"line_number":44,"context_line":"``e28769db97d9449da658bc6931fcb683``):"},{"line_number":45,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_4fa4c9b8","line":42,"updated":"2015-12-08 23:42:30.000000000","message":":command:`rbac-create`","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"43c30d772324c500cc75e435118a07aa5a84bdf9","unresolved":false,"context_lines":[{"line_number":39,"context_line":"      | tenant_id                 | de56db175c1d48b0bbe72f09a24a3b66     |"},{"line_number":40,"context_line":"      +---------------------------+--------------------------------------+"},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Now we create the policy entry using the ``rbac-create`` command (In"},{"line_number":43,"context_line":"this example, the ID of the project we want to share with is"},{"line_number":44,"context_line":"``e28769db97d9449da658bc6931fcb683``):"},{"line_number":45,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_2402bf0a","line":42,"in_reply_to":"7a740942_4fa4c9b8","updated":"2015-12-09 00:31:26.000000000","message":"Done","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"2919f08f4d66d11cad3e5cfefaedc96fa654d95d","unresolved":false,"context_lines":[{"line_number":66,"context_line":"the network we are granting access to."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"Project ``e28769db97d9449da658bc6931fcb683`` will now be able to see"},{"line_number":69,"context_line":"the network when running ``net-list`` and ``net-show`` and will also"},{"line_number":70,"context_line":"be able to create ports on that network. No other users (other than"},{"line_number":71,"context_line":"admins and the owner) will be able to see the network."},{"line_number":72,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_6fc0a550","line":69,"updated":"2015-12-08 23:42:30.000000000","message":":command:`net-list` and :command:`net-show`","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"43c30d772324c500cc75e435118a07aa5a84bdf9","unresolved":false,"context_lines":[{"line_number":66,"context_line":"the network we are granting access to."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"Project ``e28769db97d9449da658bc6931fcb683`` will now be able to see"},{"line_number":69,"context_line":"the network when running ``net-list`` and ``net-show`` and will also"},{"line_number":70,"context_line":"be able to create ports on that network. No other users (other than"},{"line_number":71,"context_line":"admins and the owner) will be able to see the network."},{"line_number":72,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_042223a3","line":69,"in_reply_to":"7a740942_6fc0a550","updated":"2015-12-09 00:31:26.000000000","message":"Done","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"2919f08f4d66d11cad3e5cfefaedc96fa654d95d","unresolved":false,"context_lines":[{"line_number":71,"context_line":"admins and the owner) will be able to see the network."},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"To remove access for that project, just delete the policy that allows"},{"line_number":74,"context_line":"it using the ``rbac-delete`` command:"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":".. code-block:: console"},{"line_number":77,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_4fd60929","line":74,"updated":"2015-12-08 23:42:30.000000000","message":":command:`rbac-delete`","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"43c30d772324c500cc75e435118a07aa5a84bdf9","unresolved":false,"context_lines":[{"line_number":71,"context_line":"admins and the owner) will be able to see the network."},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"To remove access for that project, just delete the policy that allows"},{"line_number":74,"context_line":"it using the ``rbac-delete`` command:"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":".. code-block:: console"},{"line_number":77,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_a43d4fc5","line":74,"in_reply_to":"7a740942_4fd60929","updated":"2015-12-09 00:31:26.000000000","message":"Done","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"2919f08f4d66d11cad3e5cfefaedc96fa654d95d","unresolved":false,"context_lines":[{"line_number":79,"context_line":"      Deleted rbac_policy: 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"If that project has ports on the network, the server will prevent the"},{"line_number":82,"context_line":"policy from being deleted until:"},{"line_number":83,"context_line":""},{"line_number":84,"context_line":".. code-block:: console"},{"line_number":85,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_cf4e793a","line":82,"updated":"2015-12-08 23:42:30.000000000","message":"...until the ports have been deleted.","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"43c30d772324c500cc75e435118a07aa5a84bdf9","unresolved":false,"context_lines":[{"line_number":79,"context_line":"      Deleted rbac_policy: 1edebaf8-3fa5-47b9-b3dd-ccce2bd44411"},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"If that project has ports on the network, the server will prevent the"},{"line_number":82,"context_line":"policy from being deleted until:"},{"line_number":83,"context_line":""},{"line_number":84,"context_line":".. code-block:: console"},{"line_number":85,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_24507f0a","line":82,"in_reply_to":"7a740942_cf4e793a","updated":"2015-12-09 00:31:26.000000000","message":"Done","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"2919f08f4d66d11cad3e5cfefaedc96fa654d95d","unresolved":false,"context_lines":[{"line_number":122,"context_line":"This is the equivalent of creating a policy on the network that permits"},{"line_number":123,"context_line":"every project to perform the action ``access_as_shared`` on that network."},{"line_number":124,"context_line":"In fact, neutron treats them as the same thing, so we should"},{"line_number":125,"context_line":"be able to see a policy entry for that network using the ``rbac-list``"},{"line_number":126,"context_line":"command:"},{"line_number":127,"context_line":""},{"line_number":128,"context_line":".. code-block:: console"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_2fadbd9a","line":125,"updated":"2015-12-08 23:42:30.000000000","message":":command:`rbac-list`","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"43c30d772324c500cc75e435118a07aa5a84bdf9","unresolved":false,"context_lines":[{"line_number":122,"context_line":"This is the equivalent of creating a policy on the network that permits"},{"line_number":123,"context_line":"every project to perform the action ``access_as_shared`` on that network."},{"line_number":124,"context_line":"In fact, neutron treats them as the same thing, so we should"},{"line_number":125,"context_line":"be able to see a policy entry for that network using the ``rbac-list``"},{"line_number":126,"context_line":"command:"},{"line_number":127,"context_line":""},{"line_number":128,"context_line":".. code-block:: console"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_44534b17","line":125,"in_reply_to":"7a740942_2fadbd9a","updated":"2015-12-09 00:31:26.000000000","message":"Done","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"2919f08f4d66d11cad3e5cfefaedc96fa654d95d","unresolved":false,"context_lines":[{"line_number":134,"context_line":"      | fcc63ae1-c56e-449d-8fb0-4f49f3cc8b55 | 9a4af544-7158-456d-b180-95f2e11eaa8c |"},{"line_number":135,"context_line":"      +--------------------------------------+--------------------------------------+"},{"line_number":136,"context_line":""},{"line_number":137,"context_line":"Then we can use the ``rbac-show`` command to see the details:"},{"line_number":138,"context_line":""},{"line_number":139,"context_line":".. code-block:: console"},{"line_number":140,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_ef933559","line":137,"updated":"2015-12-08 23:42:30.000000000","message":":command:`rbac-show`","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"43c30d772324c500cc75e435118a07aa5a84bdf9","unresolved":false,"context_lines":[{"line_number":134,"context_line":"      | fcc63ae1-c56e-449d-8fb0-4f49f3cc8b55 | 9a4af544-7158-456d-b180-95f2e11eaa8c |"},{"line_number":135,"context_line":"      +--------------------------------------+--------------------------------------+"},{"line_number":136,"context_line":""},{"line_number":137,"context_line":"Then we can use the ``rbac-show`` command to see the details:"},{"line_number":138,"context_line":""},{"line_number":139,"context_line":".. code-block:: console"},{"line_number":140,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_e45597f9","line":137,"in_reply_to":"7a740942_ef933559","updated":"2015-12-09 00:31:26.000000000","message":"Done","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"2919f08f4d66d11cad3e5cfefaedc96fa654d95d","unresolved":false,"context_lines":[{"line_number":159,"context_line":"creates a wildcard RBAC entry. Setting it to ``False`` removes the"},{"line_number":160,"context_line":"wildcard entry."},{"line_number":161,"context_line":""},{"line_number":162,"context_line":"When a ``net-list`` or ``net-show`` is done, the shared flag is"},{"line_number":163,"context_line":"calculated by the server based on the calling project and the RBAC"},{"line_number":164,"context_line":"entries for each network. If there is a wildcard entry, the shared"},{"line_number":165,"context_line":"flag is always set to ``True``. If there are only entries that share"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_2f84dd08","line":162,"updated":"2015-12-08 23:42:30.000000000","message":"When a :command:`net-list` or :command:`net-show` is done, the ``shared`` flag...","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"43c30d772324c500cc75e435118a07aa5a84bdf9","unresolved":false,"context_lines":[{"line_number":159,"context_line":"creates a wildcard RBAC entry. Setting it to ``False`` removes the"},{"line_number":160,"context_line":"wildcard entry."},{"line_number":161,"context_line":""},{"line_number":162,"context_line":"When a ``net-list`` or ``net-show`` is done, the shared flag is"},{"line_number":163,"context_line":"calculated by the server based on the calling project and the RBAC"},{"line_number":164,"context_line":"entries for each network. If there is a wildcard entry, the shared"},{"line_number":165,"context_line":"flag is always set to ``True``. If there are only entries that share"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_c4adfbe9","line":162,"in_reply_to":"7a740942_2f84dd08","updated":"2015-12-09 00:31:26.000000000","message":"Done","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"2919f08f4d66d11cad3e5cfefaedc96fa654d95d","unresolved":false,"context_lines":[{"line_number":161,"context_line":""},{"line_number":162,"context_line":"When a ``net-list`` or ``net-show`` is done, the shared flag is"},{"line_number":163,"context_line":"calculated by the server based on the calling project and the RBAC"},{"line_number":164,"context_line":"entries for each network. If there is a wildcard entry, the shared"},{"line_number":165,"context_line":"flag is always set to ``True``. If there are only entries that share"},{"line_number":166,"context_line":"with specific projects, only the projects the network is shared to"},{"line_number":167,"context_line":"will see the flag as ``True`` and the rest will see the flag as"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_cfa679ad","line":164,"updated":"2015-12-08 23:42:30.000000000","message":"``shared``","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"43c30d772324c500cc75e435118a07aa5a84bdf9","unresolved":false,"context_lines":[{"line_number":161,"context_line":""},{"line_number":162,"context_line":"When a ``net-list`` or ``net-show`` is done, the shared flag is"},{"line_number":163,"context_line":"calculated by the server based on the calling project and the RBAC"},{"line_number":164,"context_line":"entries for each network. If there is a wildcard entry, the shared"},{"line_number":165,"context_line":"flag is always set to ``True``. If there are only entries that share"},{"line_number":166,"context_line":"with specific projects, only the projects the network is shared to"},{"line_number":167,"context_line":"will see the flag as ``True`` and the rest will see the flag as"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_64b8c72a","line":164,"in_reply_to":"7a740942_cfa679ad","updated":"2015-12-09 00:31:26.000000000","message":"Done","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"2919f08f4d66d11cad3e5cfefaedc96fa654d95d","unresolved":false,"context_lines":[{"line_number":177,"context_line":"IDs."},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"If an operator wants to prevent normal users from doing this, the"},{"line_number":180,"context_line":"``\"create_rbac_policy\":`` entry in policy.json can be adjusted from"},{"line_number":181,"context_line":"``\"\"`` to ``\"rule:admin_only\"``."},{"line_number":182,"context_line":""},{"line_number":183,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_cfd439ed","line":180,"updated":"2015-12-08 23:42:30.000000000","message":"``policy.json``","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"},{"author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"change_message_id":"43c30d772324c500cc75e435118a07aa5a84bdf9","unresolved":false,"context_lines":[{"line_number":177,"context_line":"IDs."},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"If an operator wants to prevent normal users from doing this, the"},{"line_number":180,"context_line":"``\"create_rbac_policy\":`` entry in policy.json can be adjusted from"},{"line_number":181,"context_line":"``\"\"`` to ``\"rule:admin_only\"``."},{"line_number":182,"context_line":""},{"line_number":183,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7a740942_a499cfc5","line":180,"in_reply_to":"7a740942_cfd439ed","updated":"2015-12-09 00:31:26.000000000","message":"Done","commit_id":"3f5c562bdbf648df145d821e7c0ec0353596cb6d"}]}