)]}'
{"id":"openstack%2Fstorlets~906186","triplet_id":"openstack%2Fstorlets~master~I7790e51556875be1fc6438d1e2c599b693ca3b5b","project":"openstack/storlets","branch":"master","hashtags":[],"change_id":"I7790e51556875be1fc6438d1e2c599b693ca3b5b","subject":"Restrict access to local storlet/dependency files","status":"MERGED","created":"2024-01-20 17:33:05.000000000","updated":"2024-01-21 08:39:16.000000000","submitted":"2024-01-21 08:38:20.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"906186","meta_rev_id":"e9934df15ef3ae229db09860dcfbabfa4ed33894","_number":906186,"virtual_id_number":906186,"owner":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2024-01-21 08:38:20.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2024-01-21 07:18:24.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2024-01-21 07:18:24.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2024-01-20 17:58:57.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"85aeea7069c3d87c4a860d171e7690075abfdd6e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2024-01-20 17:33:05.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"9d82d3f5d9b974ac1a8b4320a1c529ff27c14e1b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2024-01-20 17:34:11.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"35d7f711c075e298c0fad99abcd217068e8af874","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-20 17:58:57.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/5de83906aad0471abb2f397f16bbf28f\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/5626c4696ca64a858f9ada734a8d8e02 : SUCCESS in 3m 44s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/96f413e945564d1b92e78188ab2388ea : SUCCESS in 4m 05s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/2f0e4a0fc9844a12a620dd99409c392b : SUCCESS in 4m 31s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/74dc1a834bb043c5868acc449782750d : SUCCESS in 3m 29s\n- storlets-functional https://zuul.opendev.org/t/openstack/build/bc6ca51d96a143cebb34658e41bb4130 : SUCCESS in 18m 47s","accounts_in_message":[],"_revision_number":2},{"id":"24e6fe22bcb8c35e26caf8dccf53ce2c7e523e4f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2024-01-20 18:07:05.000000000","message":"Patch Set 3: Commit message was updated.\n\nOutdated Votes:\n* Verified+1\n","accounts_in_message":[],"_revision_number":3},{"id":"54eadde020229ec3ac97777e28a9017795851ea0","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-20 18:32:11.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d1ec84a772be481ebc5847761a01e4a8\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/800e588340bd4e358a1da4fc7f5da8bd : SUCCESS in 3m 56s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/55feff030ee24ab6ba489d317c84e487 : SUCCESS in 4m 18s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/f0eb27991576404d8345608a0286d66c : SUCCESS in 4m 40s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/74a9155d156945fe8845c65d2a7369e7 : SUCCESS in 3m 38s\n- storlets-functional https://zuul.opendev.org/t/openstack/build/1457a97ef0474bb59b9b562bfa4699db : SUCCESS in 18m 56s","accounts_in_message":[],"_revision_number":3},{"id":"979749319abb0a9962fcc0b657270456b9ec21bd","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2024-01-21 07:18:24.000000000","message":"Patch Set 3: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":3},{"id":"aa55f83292a583de58051855f577ad121c7f6505","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-21 07:18:43.000000000","message":"Patch Set 3: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":3},{"id":"aecda8c945d663ec6858f92c2fbf1e8063c1097d","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-21 08:38:20.000000000","message":"Patch Set 3: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/813c49ccf88044bf87c3da36e0141e96\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c4816dd9b057448794ef354b9fe9ce08 : SUCCESS in 3m 40s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/2304586d63f643c1b4f1dd44d151fa80 : SUCCESS in 4m 13s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/f7c5b0a887834365987df30203e87e8f : SUCCESS in 4m 12s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d5f26d6bb2614b60aacbfb51c326ce62 : SUCCESS in 4m 02s\n- storlets-functional https://zuul.opendev.org/t/openstack/build/9ed986fa1082463b83712e7c49d0ff1a : SUCCESS in 18m 07s","accounts_in_message":[],"_revision_number":3},{"id":"8b2b0f9ba576fab32284ae8f0a642f067efbc4ad","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-21 08:38:20.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":3},{"id":"e9934df15ef3ae229db09860dcfbabfa4ed33894","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-21 08:39:16.000000000","message":"Patch Set 3:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a5eff6bf9edb442cae5107b868003a5d\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/dc1ce40a02a14fdbbb116f12f001642d : SUCCESS in 39s","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"5ad58804af885db3eb7a78bea5000c401eeeb70e","revisions":{"4eb277bf19c0b6e015211a2248f46a673678bec1":{"kind":"REWORK","_number":1,"created":"2024-01-20 17:33:05.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/86/906186/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/storlets","ref":"refs/changes/86/906186/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/storlets refs/changes/86/906186/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/storlets refs/changes/86/906186/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/storlets refs/changes/86/906186/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/storlets refs/changes/86/906186/1"}}},"commit":{"parents":[{"commit":"9aa8ab2cdaadd387282701d43463e486d29fa91d","subject":"Merge \"Fix python shebang\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/9aa8ab2cdaadd387282701d43463e486d29fa91d"}]}],"author":{"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","date":"2024-01-20 17:30:33.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","date":"2024-01-20 17:32:47.000000000","tz":540},"subject":"Restrict access to local storlet/dependency files","message":"Restrict access to local storlet/dependency files\n\nNow swift and storlet daemon inside containers run with consistent uid\nso we don\u0027t need group/other permissions.\n\nAlso chown should be executed before actual file content is written,\nso that the content is not read by a different user.\n\nChange-Id: I7790e51556875be1fc6438d1e2c599b693ca3b5b\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/4eb277bf19c0b6e015211a2248f46a673678bec1"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/4eb277bf19c0b6e015211a2248f46a673678bec1"}]},"branch":"refs/heads/master"},"015e226b521c6c88179572f93384b54bd7d63402":{"kind":"REWORK","_number":2,"created":"2024-01-20 17:34:11.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/86/906186/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/storlets","ref":"refs/changes/86/906186/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/storlets refs/changes/86/906186/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/storlets refs/changes/86/906186/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/storlets refs/changes/86/906186/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/storlets refs/changes/86/906186/2"}}},"commit":{"parents":[{"commit":"9aa8ab2cdaadd387282701d43463e486d29fa91d","subject":"Merge \"Fix python shebang\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/9aa8ab2cdaadd387282701d43463e486d29fa91d"}]}],"author":{"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","date":"2024-01-20 17:30:33.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","date":"2024-01-20 17:34:02.000000000","tz":540},"subject":"Restrict access to local storlet/dependency files","message":"Restrict access to local storlet/dependency files\n\nNow swift and storlet daemon inside containers run with consistent uid\nso we don\u0027t need group/other permissions.\n\nAlso chown should be executed before actual file content is written,\nso that the content is not read by a different user.\n\nChange-Id: I7790e51556875be1fc6438d1e2c599b693ca3b5b\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/015e226b521c6c88179572f93384b54bd7d63402"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/015e226b521c6c88179572f93384b54bd7d63402"}]},"branch":"refs/heads/master"},"5ad58804af885db3eb7a78bea5000c401eeeb70e":{"kind":"NO_CODE_CHANGE","_number":3,"created":"2024-01-20 18:07:05.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/86/906186/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/storlets","ref":"refs/changes/86/906186/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/storlets refs/changes/86/906186/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/storlets refs/changes/86/906186/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/storlets refs/changes/86/906186/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/storlets refs/changes/86/906186/3"}}},"commit":{"parents":[{"commit":"9aa8ab2cdaadd387282701d43463e486d29fa91d","subject":"Merge \"Fix python shebang\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/9aa8ab2cdaadd387282701d43463e486d29fa91d"}]}],"author":{"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","date":"2024-01-20 17:30:33.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","date":"2024-01-20 18:07:05.000000000","tz":0},"subject":"Restrict access to local storlet/dependency files","message":"Restrict access to local storlet/dependency files\n\nNow swift and storlet daemon inside containers run with consistent uid\nso we don\u0027t need group/other permissions.\n\nAlso chown should be executed before actual file content is written,\nso that the content is not read by a different user.\n\nCloses-Bug: #2047723\nChange-Id: I7790e51556875be1fc6438d1e2c599b693ca3b5b\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/5ad58804af885db3eb7a78bea5000c401eeeb70e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/5ad58804af885db3eb7a78bea5000c401eeeb70e"}]},"branch":"refs/heads/master","description":"Edit commit message"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{}}}]}