)]}'
{"security-guide/source/identity/policies.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"63cf45deb0ea3ce2d9d0942ba1e804054a45806d","unresolved":false,"context_lines":[{"line_number":7,"context_line":"ability to attach to a volume, or to fire up instances. The policy rules are"},{"line_number":8,"context_line":"specified in JSON format and the file is called :file:`policy.json`.  The"},{"line_number":9,"context_line":"syntax and format of this file is discussed in the `Configuration Reference"},{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/trunk/config-reference/content/policy-json-file.html\u003e`__."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"These policies can be modified or updated by the cloud admin to control the"},{"line_number":13,"context_line":"access to the various resources. Care should be taken to ensure that any"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa69d971_680f9139","line":10,"range":{"start_line":10,"start_character":8,"end_line":10,"end_character":12},"updated":"2016-01-10 18:55:43.000000000","message":"/trunk/ is not a correct URL, link to the liberty version instead","commit_id":"eb63f4e50690255cbb08071610373b8ff5b99516"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"63cf45deb0ea3ce2d9d0942ba1e804054a45806d","unresolved":false,"context_lines":[{"line_number":9,"context_line":"syntax and format of this file is discussed in the `Configuration Reference"},{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/trunk/config-reference/content/policy-json-file.html\u003e`__."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"These policies can be modified or updated by the cloud admin to control the"},{"line_number":13,"context_line":"access to the various resources. Care should be taken to ensure that any"},{"line_number":14,"context_line":"changes to the access control policies do not unintentionally weaken the"},{"line_number":15,"context_line":"security of any resource. Also note that changes to the policy.json file"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa69d971_8814454d","line":12,"range":{"start_line":12,"start_character":55,"end_line":12,"end_character":60},"updated":"2016-01-10 18:55:43.000000000","message":"admin -\u003e administrator","commit_id":"eb63f4e50690255cbb08071610373b8ff5b99516"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"63cf45deb0ea3ce2d9d0942ba1e804054a45806d","unresolved":false,"context_lines":[{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/trunk/config-reference/content/policy-json-file.html\u003e`__."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"These policies can be modified or updated by the cloud admin to control the"},{"line_number":13,"context_line":"access to the various resources. Care should be taken to ensure that any"},{"line_number":14,"context_line":"changes to the access control policies do not unintentionally weaken the"},{"line_number":15,"context_line":"security of any resource. Also note that changes to the policy.json file"},{"line_number":16,"context_line":"become effective immediately and do not require the service to be restarted."}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa69d971_280e793b","line":13,"range":{"start_line":13,"start_character":38,"end_line":13,"end_character":44},"updated":"2016-01-10 18:55:43.000000000","message":"Use active voice","commit_id":"eb63f4e50690255cbb08071610373b8ff5b99516"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"63cf45deb0ea3ce2d9d0942ba1e804054a45806d","unresolved":false,"context_lines":[{"line_number":12,"context_line":"These policies can be modified or updated by the cloud admin to control the"},{"line_number":13,"context_line":"access to the various resources. Care should be taken to ensure that any"},{"line_number":14,"context_line":"changes to the access control policies do not unintentionally weaken the"},{"line_number":15,"context_line":"security of any resource. Also note that changes to the policy.json file"},{"line_number":16,"context_line":"become effective immediately and do not require the service to be restarted."},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"The following example shows how the service can restrict access to"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa69d971_e803810e","line":15,"range":{"start_line":15,"start_character":56,"end_line":15,"end_character":62},"updated":"2016-01-10 18:55:43.000000000","message":"``policy.json``","commit_id":"eb63f4e50690255cbb08071610373b8ff5b99516"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"63cf45deb0ea3ce2d9d0942ba1e804054a45806d","unresolved":false,"context_lines":[{"line_number":16,"context_line":"become effective immediately and do not require the service to be restarted."},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"The following example shows how the service can restrict access to"},{"line_number":19,"context_line":"create/update/delete resources to only those users which have the role of"},{"line_number":20,"context_line":"**cloud_admin** which has been defined as being the conjunction of"},{"line_number":21,"context_line":"role \u003d admin and domain_id \u003d admin_domain_id while the get/list resources"},{"line_number":22,"context_line":"are made available to users which have the role of **cloud_admin** or"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa69d971_08013506","line":19,"range":{"start_line":19,"start_character":7,"end_line":19,"end_character":13},"updated":"2016-01-10 18:55:43.000000000","message":"replace / with proper conjunktions","commit_id":"eb63f4e50690255cbb08071610373b8ff5b99516"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"63cf45deb0ea3ce2d9d0942ba1e804054a45806d","unresolved":false,"context_lines":[{"line_number":17,"context_line":""},{"line_number":18,"context_line":"The following example shows how the service can restrict access to"},{"line_number":19,"context_line":"create/update/delete resources to only those users which have the role of"},{"line_number":20,"context_line":"**cloud_admin** which has been defined as being the conjunction of"},{"line_number":21,"context_line":"role \u003d admin and domain_id \u003d admin_domain_id while the get/list resources"},{"line_number":22,"context_line":"are made available to users which have the role of **cloud_admin** or"},{"line_number":23,"context_line":"**admin**."}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa69d971_ab002302","line":20,"range":{"start_line":20,"start_character":2,"end_line":20,"end_character":13},"updated":"2016-01-10 18:55:43.000000000","message":"Use `` instead of **","commit_id":"eb63f4e50690255cbb08071610373b8ff5b99516"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"63cf45deb0ea3ce2d9d0942ba1e804054a45806d","unresolved":false,"context_lines":[{"line_number":18,"context_line":"The following example shows how the service can restrict access to"},{"line_number":19,"context_line":"create/update/delete resources to only those users which have the role of"},{"line_number":20,"context_line":"**cloud_admin** which has been defined as being the conjunction of"},{"line_number":21,"context_line":"role \u003d admin and domain_id \u003d admin_domain_id while the get/list resources"},{"line_number":22,"context_line":"are made available to users which have the role of **cloud_admin** or"},{"line_number":23,"context_line":"**admin**."},{"line_number":24,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa69d971_cb055711","line":21,"range":{"start_line":21,"start_character":0,"end_line":21,"end_character":4},"updated":"2016-01-10 18:55:43.000000000","message":"``role \u003d admin`` and ``domain_id \u003d admin_domain_id``\n\nReplace /","commit_id":"eb63f4e50690255cbb08071610373b8ff5b99516"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"63cf45deb0ea3ce2d9d0942ba1e804054a45806d","unresolved":false,"context_lines":[{"line_number":20,"context_line":"**cloud_admin** which has been defined as being the conjunction of"},{"line_number":21,"context_line":"role \u003d admin and domain_id \u003d admin_domain_id while the get/list resources"},{"line_number":22,"context_line":"are made available to users which have the role of **cloud_admin** or"},{"line_number":23,"context_line":"**admin**."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":".. code:: json"},{"line_number":26,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa69d971_6b06ab1d","line":23,"updated":"2016-01-10 18:55:43.000000000","message":"Like above","commit_id":"eb63f4e50690255cbb08071610373b8ff5b99516"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f252535738e7d44a5f642c86866a86d66676fffa","unresolved":false,"context_lines":[{"line_number":20,"context_line":"``cloud_admin`` which has been defined as being the conjunction of"},{"line_number":21,"context_line":"``role \u003d admin`` and ``domain_id \u003d admin_domain_id`` while the get and list"},{"line_number":22,"context_line":"resources are made available to users which have the role of ``cloud_admin``"},{"line_number":23,"context_line":"or ``admin``."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":".. code:: json"},{"line_number":26,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa69d971_9f78d2c5","line":23,"updated":"2016-01-11 18:34:01.000000000","message":"this sentence is a bit long, i think it would help to add a few commas. namely one after the first usage of ``cloud_admin`` and a second after ``domain_id \u003d admin_domain_id``.","commit_id":"91c1d0ff2792f6bd8966408684c690d691737858"}]}