)]}'
{"id":"openstack%2Fplacement~774827","triplet_id":"openstack%2Fplacement~master~Ifeb5ae29d9d637708cd5c0bc62a2abfcbac3ca6e","project":"openstack/placement","branch":"master","topic":"secure-rbac","hashtags":[],"change_id":"Ifeb5ae29d9d637708cd5c0bc62a2abfcbac3ca6e","subject":"Implement secure RBAC for reshaper","status":"MERGED","created":"2021-02-10 11:10:16.000000000","updated":"2021-02-11 02:09:36.000000000","submitted":"2021-02-11 02:08:04.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"774827-secure-rbac","meta_rev_id":"70e66ad0f78fec3fb0637af8f4005028ea3cd6d3","_number":774827,"virtual_id_number":774827,"owner":{"_account_id":15334,"name":"Stephen Finucane","display_name":"stephenfin","email":"stephenfin@redhat.com","username":"sfinucan"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},{"value":0,"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2021-02-11 02:08:03.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"all":[{"value":2,"date":"2021-02-10 11:12:53.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},{"value":2,"date":"2021-02-10 22:02:00.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"all":[{"value":0,"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},{"value":1,"date":"2021-02-10 22:02:00.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},{"value":0,"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{" 0":"Default Priority","+1":"Contributor Review Promise","+2":"Core Review Promise"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2021-02-10 11:12:53.000000000","updated_by":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"reviewer":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"state":"REVIEWER"},{"updated":"2021-02-10 12:23:12.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-02-10 22:02:00.000000000","updated_by":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"reviewer":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"state":"REVIEWER"}],"messages":[{"id":"82fd696dcdfe62cc9d269ec2b4986627f6fe8cd4","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15334,"name":"Stephen Finucane","display_name":"stephenfin","email":"stephenfin@redhat.com","username":"sfinucan"},"date":"2021-02-10 11:10:16.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"4edf6f02cb091892dec3059bf374b5ae7b2b0758","author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"date":"2021-02-10 11:12:53.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"c92d04dbade957ee65313ed94af3cf8c273e6d0a","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-10 12:23:12.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- grenade https://zuul.opendev.org/t/openstack/build/a95eb92a70b4496587fcd4a31095e503 : SUCCESS in 52m 06s\n- tempest-integrated-placement https://zuul.opendev.org/t/openstack/build/49e83776ef71452fb8f76c1b43158401 : SUCCESS in 1h 09m 51s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/e585230e96dc46b8925db2e1b39763e2 : SUCCESS in 7m 15s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/8ff38de7636a474caca518533b1f88fd : SUCCESS in 6m 53s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/76efae599501402986339469a2f94315 : SUCCESS in 5m 51s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/86323252df674db2a5ad0bd925345731 : SUCCESS in 5m 41s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/86348539f8fe4a549debd2f495400dcf : SUCCESS in 5m 26s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/559ac11109184eac84827fcdbd9e655b : SUCCESS in 6m 04s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1c8ea63e43e4474a97977d7779e659de : SUCCESS in 8m 24s\n- openstack-tox-functional-py36 https://zuul.opendev.org/t/openstack/build/743cabc351d145dbb43ced8542ccfb70 : SUCCESS in 5m 26s\n- openstack-tox-functional-py37 https://zuul.opendev.org/t/openstack/build/ff176d13c8ad4d1fa3e490a051e4701b : SUCCESS in 6m 57s\n- openstack-tox-functional-py38 https://zuul.opendev.org/t/openstack/build/9f7364247e374e7b88d94733e33300ec : SUCCESS in 5m 31s\n- openstack-tox-functional-py39 https://zuul.opendev.org/t/openstack/build/c89e0fab3c6941bba1cae432d27ddfdc : SUCCESS in 6m 09s (non-voting)\n- placement-nova-tox-functional-py38 https://zuul.opendev.org/t/openstack/build/38f9c992fd84443eb378108716a2277e : SUCCESS in 14m 18s\n- placement-nested-perfload https://zuul.opendev.org/t/openstack/build/14c41a3eb9f6466591673bfd08733631 : SUCCESS in 24m 15s (non-voting)\n- placement-perfload https://zuul.opendev.org/t/openstack/build/f95f0ca90efc4b86909f56cdbe2e6d9e : SUCCESS in 10m 23s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/9d01f6bf7ad6425cb0f5602575251890 : SUCCESS in 1h 05m 17s","accounts_in_message":[],"_revision_number":1},{"id":"602f937c57a9e4e51bce8afa8d308ed95fb8f18d","author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"date":"2021-02-10 22:02:00.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1\n\nlgtm","accounts_in_message":[],"_revision_number":1},{"id":"4189e05dca2e638b599c94131f78b09aceb5fcd0","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-10 22:02:31.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"42580f1753339b5a1b05eef53ecf63584569bccf","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-11 02:08:03.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- grenade https://zuul.opendev.org/t/openstack/build/aa2346c7de7f4bfd818ee04e29393d24 : SUCCESS in 1h 05m 07s\n- tempest-integrated-placement https://zuul.opendev.org/t/openstack/build/14ada85f64ae4bc9944d046534e7f0c8 : SUCCESS in 1h 17m 31s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/88feef797c1e42c9939ed1d2d384b3fd : SUCCESS in 6m 09s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/af0127c29098401c8499696be3e94a43 : SUCCESS in 5m 17s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/b7629ca180de4effa8ef0109dc93d17a : SUCCESS in 6m 51s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/8ff9cc0fa38e46e39b668d60f102b62d : SUCCESS in 8m 06s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b0f1781d511d4dfebdcb2dedd534df32 : SUCCESS in 9m 36s\n- openstack-tox-functional-py36 https://zuul.opendev.org/t/openstack/build/413dac6e0c2b4ba59f0144cd33d7d11d : SUCCESS in 5m 16s\n- openstack-tox-functional-py37 https://zuul.opendev.org/t/openstack/build/cc1368e0d9ba487e88e2ca36bca7ca4c : SUCCESS in 6m 14s\n- openstack-tox-functional-py38 https://zuul.opendev.org/t/openstack/build/fc8b7ade45c7405099f762139b2adb90 : SUCCESS in 5m 26s\n- placement-nova-tox-functional-py38 https://zuul.opendev.org/t/openstack/build/e976a4e8a34d4bf59ec06b592eb875be : SUCCESS in 16m 19s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/35db851c7c7044d68c1bb46ea43af5cf : SUCCESS in 1h 11m 17s","accounts_in_message":[],"_revision_number":1},{"id":"946a7a784cd23cd59bb9647bc762f9619ba8f25a","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-11 02:08:04.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":1},{"id":"70e66ad0f78fec3fb0637af8f4005028ea3cd6d3","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-11 02:09:36.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/514144bf732844b0a97ddc6f683eeca3 : SUCCESS in 1m 06s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"94279af1e1576c6e9e99cb8ccaac73304c78e4a4","revisions":{"94279af1e1576c6e9e99cb8ccaac73304c78e4a4":{"kind":"REWORK","_number":1,"created":"2021-02-10 11:10:16.000000000","uploader":{"_account_id":15334,"name":"Stephen Finucane","display_name":"stephenfin","email":"stephenfin@redhat.com","username":"sfinucan"},"ref":"refs/changes/27/774827/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/placement","ref":"refs/changes/27/774827/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/placement refs/changes/27/774827/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/placement refs/changes/27/774827/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/placement refs/changes/27/774827/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/placement refs/changes/27/774827/1"}}},"commit":{"parents":[{"commit":"6805790dda992cf9119368c41bbbc4c2557603bc","subject":"policy: Add note about keystone\u0027s expansion of roles","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/placement/commit/6805790dda992cf9119368c41bbbc4c2557603bc"}]}],"author":{"name":"Stephen Finucane","email":"stephenfin@redhat.com","date":"2021-02-10 10:37:55.000000000","tz":0},"committer":{"name":"Stephen Finucane","email":"stephenfin@redhat.com","date":"2021-02-10 11:00:40.000000000","tz":0},"subject":"Implement secure RBAC for reshaper","message":"Implement secure RBAC for reshaper\n\nThis commit updates the policies for the resource classes in placement to\nsupport read-only roles.\n\nThis is part of a broader community effort to support read-only roles\nand implement secure, consistent default policies.\n\nChange-Id: Ifeb5ae29d9d637708cd5c0bc62a2abfcbac3ca6e\nSigned-off-by: Stephen Finucane \u003cstephenfin@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/placement/commit/94279af1e1576c6e9e99cb8ccaac73304c78e4a4"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/placement/commit/94279af1e1576c6e9e99cb8ccaac73304c78e4a4"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"}}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}