)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":29632,"name":"Carlos Eduardo","email":"ces.eduardo98@gmail.com","username":"silvacarlos"},"change_message_id":"e7752d1eeab33d0472bc8b3847b933098eee0b68","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"8f25bc81_3a3c4d36","updated":"2026-07-31 18:35:52.000000000","message":"Thank you for the review. PTAL :)","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"20523b82889b4f0cd3beb2b7600924b7324333e5","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"19d7f4f2_71ae6e76","updated":"2026-07-30 22:25:51.000000000","message":"Thanks for working on this @ces.eduardo98@gmail.com! Please see comments inline","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"12a4fbffe62b80c98af57c61038615d562b215da","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"a573f62d_127b3e8c","updated":"2026-07-31 18:49:43.000000000","message":"LGTM, thank you","commit_id":"c9c178951857ab612b70d2e61b574963b783b2ea"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"d795ac4e923382bf3b139e312b2bd5a10b4ab54f","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"0037716c_241e69e8","updated":"2026-07-31 19:58:48.000000000","message":"Renumber this to OSSN-0103 please","commit_id":"c9c178951857ab612b70d2e61b574963b783b2ea"},{"author":{"_account_id":29632,"name":"Carlos Eduardo","email":"ces.eduardo98@gmail.com","username":"silvacarlos"},"change_message_id":"67746dce9d89a10504d85398a64a25537ddce42b","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"113109fe_5f91a25a","in_reply_to":"0037716c_241e69e8","updated":"2026-07-31 20:31:51.000000000","message":"Ah, sure! I saw other proposals named 0103, so decided to skip one. Update is done now.","commit_id":"c9c178951857ab612b70d2e61b574963b783b2ea"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"a5aa4ce9cdbab85f1f5ca5e32c9503342a9fbdc7","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"035d3d8b_ac74e03e","updated":"2026-07-31 20:53:49.000000000","message":"LGTM, thank you, Carlos - for triaging, fixing and writing this note.\n\nDo read the rest of the process: https://wiki.openstack.org/wiki/Security/Security_Note_Process#Publishing\n\nwhile @fungi@yuggoth.org @jay@jvf.cc look at this. \n\nLet me know if you need any help","commit_id":"5bf348f1a05ae34e157d1a7b4496ba54d34f077b"}],"security-notes/OSSN-0104":[{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"20523b82889b4f0cd3beb2b7600924b7324333e5","unresolved":true,"context_lines":[{"line_number":10,"context_line":"unchanged, bypassing project scoping."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"### Affected Services / Software ###"},{"line_number":13,"context_line":"- manila: \u003e\u003d17.0.0"},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"### Discussion ###"},{"line_number":16,"context_line":"Manila\u0027s resource-lock list API accepts an optional project UUID query"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"6c31ac22_68da8cc1","line":13,"range":{"start_line":13,"start_character":10,"end_line":13,"end_character":18},"updated":"2026-07-30 22:25:51.000000000","message":"let\u0027s rewrite this this way:\n\n`\u003e\u003d17.0.0 \u003c20.0.2, \u003e\u003d21.0.0 \u003c21.0.2, \u003e\u003d22.0.0 \u003c22.0.1`\n\nsaying \"\u003e\u003d17.0.0\" could mean the bug fix will never be merged","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":29632,"name":"Carlos Eduardo","email":"ces.eduardo98@gmail.com","username":"silvacarlos"},"change_message_id":"e7752d1eeab33d0472bc8b3847b933098eee0b68","unresolved":false,"context_lines":[{"line_number":10,"context_line":"unchanged, bypassing project scoping."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"### Affected Services / Software ###"},{"line_number":13,"context_line":"- manila: \u003e\u003d17.0.0"},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"### Discussion ###"},{"line_number":16,"context_line":"Manila\u0027s resource-lock list API accepts an optional project UUID query"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"88b8d4c9_5ec700e4","line":13,"range":{"start_line":13,"start_character":10,"end_line":13,"end_character":18},"in_reply_to":"6c31ac22_68da8cc1","updated":"2026-07-31 18:35:52.000000000","message":"Done","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"20523b82889b4f0cd3beb2b7600924b7324333e5","unresolved":true,"context_lines":[{"line_number":14,"context_line":""},{"line_number":15,"context_line":"### Discussion ###"},{"line_number":16,"context_line":"Manila\u0027s resource-lock list API accepts an optional project UUID query"},{"line_number":17,"context_line":"parameter. The ID is added as a filter and there is no verification for"},{"line_number":18,"context_line":"whether that the caller is authorized to view locks belonging to that project."},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"This allows any authenticated user with at least a reader role on any"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"2db57050_b56bf219","line":17,"range":{"start_line":17,"start_character":68,"end_line":17,"end_character":71},"updated":"2026-07-30 22:25:51.000000000","message":"remove","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":29632,"name":"Carlos Eduardo","email":"ces.eduardo98@gmail.com","username":"silvacarlos"},"change_message_id":"e7752d1eeab33d0472bc8b3847b933098eee0b68","unresolved":false,"context_lines":[{"line_number":14,"context_line":""},{"line_number":15,"context_line":"### Discussion ###"},{"line_number":16,"context_line":"Manila\u0027s resource-lock list API accepts an optional project UUID query"},{"line_number":17,"context_line":"parameter. The ID is added as a filter and there is no verification for"},{"line_number":18,"context_line":"whether that the caller is authorized to view locks belonging to that project."},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"This allows any authenticated user with at least a reader role on any"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"69b0c447_e4f73ab7","line":17,"range":{"start_line":17,"start_character":68,"end_line":17,"end_character":71},"in_reply_to":"2db57050_b56bf219","updated":"2026-07-31 18:35:52.000000000","message":"Done","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"20523b82889b4f0cd3beb2b7600924b7324333e5","unresolved":true,"context_lines":[{"line_number":38,"context_line":"#### Patches ####"},{"line_number":39,"context_line":"The following reviews contain the fix for this issue:"},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"2026.2/hibiscus (development): https://review.opendev.org/c/openstack/manila/+/998388"},{"line_number":42,"context_line":"2026.1/gazpacho: https://review.opendev.org/c/openstack/manila/+/998567"},{"line_number":43,"context_line":"2025.2/flamingo: https://review.opendev.org/c/openstack/manila/+/998568"},{"line_number":44,"context_line":"2025.1/epoxy: https://review.opendev.org/c/openstack/manila/+/998569"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"### Credits ###"},{"line_number":47,"context_line":"Chen YuXiang"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"ab397778_7205fe45","line":44,"range":{"start_line":41,"start_character":0,"end_line":44,"end_character":68},"updated":"2026-07-30 22:25:51.000000000","message":"I personally prefer short form URLs, we tend to use a template on OSSAs and sorta enforce them:\n\n\n\n```suggestion\n2026.2/hibiscus (development): https://review.opendev.org/998388\n2026.1/gazpacho: https://review.opendev.org/998567\n2025.2/flamingo: https://review.opendev.org/998568\n2025.1/epoxy: https://review.opendev.org/998569\n```","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":29632,"name":"Carlos Eduardo","email":"ces.eduardo98@gmail.com","username":"silvacarlos"},"change_message_id":"e7752d1eeab33d0472bc8b3847b933098eee0b68","unresolved":false,"context_lines":[{"line_number":38,"context_line":"#### Patches ####"},{"line_number":39,"context_line":"The following reviews contain the fix for this issue:"},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"2026.2/hibiscus (development): https://review.opendev.org/c/openstack/manila/+/998388"},{"line_number":42,"context_line":"2026.1/gazpacho: https://review.opendev.org/c/openstack/manila/+/998567"},{"line_number":43,"context_line":"2025.2/flamingo: https://review.opendev.org/c/openstack/manila/+/998568"},{"line_number":44,"context_line":"2025.1/epoxy: https://review.opendev.org/c/openstack/manila/+/998569"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"### Credits ###"},{"line_number":47,"context_line":"Chen YuXiang"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"35fbf070_645d6ac0","line":44,"range":{"start_line":41,"start_character":0,"end_line":44,"end_character":68},"in_reply_to":"ab397778_7205fe45","updated":"2026-07-31 18:35:52.000000000","message":"Done","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"20523b82889b4f0cd3beb2b7600924b7324333e5","unresolved":true,"context_lines":[{"line_number":44,"context_line":"2025.1/epoxy: https://review.opendev.org/c/openstack/manila/+/998569"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"### Credits ###"},{"line_number":47,"context_line":"Chen YuXiang"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"### Contacts / References ###"},{"line_number":50,"context_line":"Authors:"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"f1cc5410_aaf2e5c8","line":47,"range":{"start_line":47,"start_character":0,"end_line":47,"end_character":12},"updated":"2026-07-30 22:25:51.000000000","message":"```suggestion\nChen YuXiang, Institute of Computing Technology, Chinese Academy of Sciences\n```","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":29632,"name":"Carlos Eduardo","email":"ces.eduardo98@gmail.com","username":"silvacarlos"},"change_message_id":"e7752d1eeab33d0472bc8b3847b933098eee0b68","unresolved":false,"context_lines":[{"line_number":44,"context_line":"2025.1/epoxy: https://review.opendev.org/c/openstack/manila/+/998569"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"### Credits ###"},{"line_number":47,"context_line":"Chen YuXiang"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"### Contacts / References ###"},{"line_number":50,"context_line":"Authors:"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"36959509_13f7a8bc","line":47,"range":{"start_line":47,"start_character":0,"end_line":47,"end_character":12},"in_reply_to":"f1cc5410_aaf2e5c8","updated":"2026-07-31 18:35:52.000000000","message":"Done","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"20523b82889b4f0cd3beb2b7600924b7324333e5","unresolved":true,"context_lines":[{"line_number":48,"context_line":""},{"line_number":49,"context_line":"### Contacts / References ###"},{"line_number":50,"context_line":"Authors:"},{"line_number":51,"context_line":"- Carlos da Silva"},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"This OSSN: https://wiki.openstack.org/wiki/OSSN/OSSN-0104"},{"line_number":54,"context_line":"Original Launchpad bug: https://bugs.launchpad.net/manila/+bug/2161287"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"82d3ec02_075525c2","line":51,"range":{"start_line":51,"start_character":2,"end_line":51,"end_character":17},"updated":"2026-07-30 22:25:51.000000000","message":"```suggestion\n- Carlos da Silva, Red Hat\n```\n\nunless you prefer to drop that","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"},{"author":{"_account_id":29632,"name":"Carlos Eduardo","email":"ces.eduardo98@gmail.com","username":"silvacarlos"},"change_message_id":"e7752d1eeab33d0472bc8b3847b933098eee0b68","unresolved":false,"context_lines":[{"line_number":48,"context_line":""},{"line_number":49,"context_line":"### Contacts / References ###"},{"line_number":50,"context_line":"Authors:"},{"line_number":51,"context_line":"- Carlos da Silva"},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"This OSSN: https://wiki.openstack.org/wiki/OSSN/OSSN-0104"},{"line_number":54,"context_line":"Original Launchpad bug: https://bugs.launchpad.net/manila/+bug/2161287"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"764e37b8_38890882","line":51,"range":{"start_line":51,"start_character":2,"end_line":51,"end_character":17},"in_reply_to":"82d3ec02_075525c2","updated":"2026-07-31 18:35:52.000000000","message":"Done","commit_id":"cd88ccef547d786a55b852be62b340f0ecbf7cd6"}]}