)]}'
{"id":"openstack%2Ftacker-specs~867763","triplet_id":"openstack%2Ftacker-specs~master~Ib8f1c83be1bec3644f0fbead46ccd6ab7c2d4e83","project":"openstack/tacker-specs","branch":"master","topic":"bp/enhance-api-policy","attention_set":{},"removed_from_attention_set":{"31857":{"account":{"_account_id":31857,"name":"Ayumu Ueha","email":"ueha.ayumu@fujitsu.com","username":"ueha"},"last_update":"2022-12-28 04:21:02.000000000","reason":"\u003cGERRIT_ACCOUNT_31857\u003e replied on the change","reason_account":{"_account_id":31857,"name":"Ayumu Ueha","email":"ueha.ayumu@fujitsu.com","username":"ueha"}},"31668":{"account":{"_account_id":31668,"deleted":true},"last_update":"2022-12-28 00:02:21.000000000","reason":"\u003cGERRIT_ACCOUNT_31668\u003e replied on the change","reason_account":{"_account_id":31668,"deleted":true}},"25701":{"account":{"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"},"last_update":"2022-12-28 05:18:15.000000000","reason":"\u003cGERRIT_ACCOUNT_25701\u003e replied on the change","reason_account":{"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"}},"17255":{"account":{"_account_id":17255,"name":"Toshiaki Takahashi","email":"ts-takahashi@nec.com","username":"takahashi_ts"},"last_update":"2022-12-28 05:23:36.000000000","reason":"Change was submitted"},"34712":{"account":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"last_update":"2022-12-28 05:23:36.000000000","reason":"Change was submitted"},"33455":{"account":{"_account_id":33455,"name":"Hiromu Asahina","email":"hiromu.a5a@gmail.com","username":"h_asahina"},"last_update":"2022-12-28 05:23:36.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"Ib8f1c83be1bec3644f0fbead46ccd6ab7c2d4e83","subject":"Enhancement of Tacker API Resource Access Control","status":"MERGED","created":"2022-12-15 07:50:18.000000000","updated":"2022-12-28 05:24:37.000000000","submitted":"2022-12-28 05:23:36.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":17,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"867763-bp/enhance-api-policy","meta_rev_id":"e1396cd9ff309210ddacd35513aba9896a3cdc54","_number":867763,"virtual_id_number":867763,"owner":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":31857,"name":"Ayumu Ueha","email":"ueha.ayumu@fujitsu.com","username":"ueha"},{"value":0,"_account_id":31668},{"value":0,"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2022-12-28 05:23:35.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":31857,"name":"Ayumu Ueha","email":"ueha.ayumu@fujitsu.com","username":"ueha"},"all":[{"value":2,"date":"2022-12-28 04:21:02.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":31857,"name":"Ayumu Ueha","email":"ueha.ayumu@fujitsu.com","username":"ueha"},{"value":1,"date":"2022-12-28 00:02:21.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":31668},{"value":2,"date":"2022-12-28 05:18:15.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"},"all":[{"value":0,"_account_id":31857,"name":"Ayumu Ueha","email":"ueha.ayumu@fujitsu.com","username":"ueha"},{"value":0,"_account_id":31668},{"value":1,"date":"2022-12-28 05:18:15.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[{"_account_id":17255,"name":"Toshiaki Takahashi","email":"ts-takahashi@nec.com","username":"takahashi_ts"},{"_account_id":33455,"name":"Hiromu Asahina","email":"hiromu.a5a@gmail.com","username":"h_asahina"}],"reviewers":{"REVIEWER":[{"_account_id":17255,"name":"Toshiaki Takahashi","email":"ts-takahashi@nec.com","username":"takahashi_ts"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"},{"_account_id":31668,"deleted":true},{"_account_id":31857,"name":"Ayumu Ueha","email":"ueha.ayumu@fujitsu.com","username":"ueha"},{"_account_id":33455,"name":"Hiromu Asahina","email":"hiromu.a5a@gmail.com","username":"h_asahina"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2022-12-15 07:55:13.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2022-12-15 08:19:02.000000000","updated_by":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"reviewer":{"_account_id":17255,"name":"Toshiaki Takahashi","email":"ts-takahashi@nec.com","username":"takahashi_ts"},"state":"REVIEWER"},{"updated":"2022-12-15 08:19:02.000000000","updated_by":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"reviewer":{"_account_id":31857,"name":"Ayumu Ueha","email":"ueha.ayumu@fujitsu.com","username":"ueha"},"state":"REVIEWER"},{"updated":"2022-12-15 08:19:02.000000000","updated_by":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"reviewer":{"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"},"state":"REVIEWER"},{"updated":"2022-12-15 08:19:02.000000000","updated_by":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"reviewer":{"_account_id":31668,"deleted":true},"state":"REVIEWER"},{"updated":"2022-12-15 08:19:02.000000000","updated_by":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"reviewer":{"_account_id":33455,"name":"Hiromu Asahina","email":"hiromu.a5a@gmail.com","username":"h_asahina"},"state":"REVIEWER"}],"messages":[{"id":"b2c3eaf2119baba85fca36b7adc35a03215833a8","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"date":"2022-12-15 07:50:18.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"b57ee90ffe1da60926b2741776780ca02f1a2349","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-12-15 07:55:13.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/bc86eecfbea74466be365dbb24189af4\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8c429c1a5a794ae4b9569f9f363f5851 : SUCCESS in 4m 02s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e1cd28b495c1441281284c51d94ae2aa : SUCCESS in 2m 34s","accounts_in_message":[],"_revision_number":1},{"id":"c9ea958ab21bd8344e1bc10d568f8045ad435fe5","author":{"_account_id":31668,"deleted":true},"date":"2022-12-22 02:45:10.000000000","message":"Patch Set 1:\n\n(3 comments)","accounts_in_message":[],"_revision_number":1},{"id":"b5a5656df8d318dd52e2ef7b620323fafa8d1905","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"date":"2022-12-26 12:09:49.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"78abb998112b23dda62cde8e73d0d4e174e4ef19","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-12-26 12:20:27.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/3405103e507b415a9d5d2259259824e1\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1cba4b5080854c9bb79b59beab04b859 : SUCCESS in 5m 31s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/3f630cb787f24e7b9e2f8d39c283c606 : SUCCESS in 2m 33s","accounts_in_message":[],"_revision_number":2},{"id":"5a7675b4cc05192040f7fa39872971bd77515cdd","author":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"date":"2022-12-26 12:22:40.000000000","message":"Patch Set 2:\n\n(5 comments)","accounts_in_message":[],"_revision_number":2},{"id":"c7049f07be3ca4cca6c9c3e62080cb82010d18c7","author":{"_account_id":31668,"deleted":true},"date":"2022-12-27 06:55:35.000000000","message":"Patch Set 2:\n\n(3 comments)","accounts_in_message":[],"_revision_number":2},{"id":"fff6f93281d52fae73f98c05c9b8276bde4baef8","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"date":"2022-12-27 23:36:15.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"763988a7c480951ebb6096370a2e4102743f9cb5","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-12-27 23:45:09.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d34882468ae148a2a91707fc32c08647\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e2be9d19d59843f5be9a0b3e1d552d49 : SUCCESS in 4m 10s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/38be3fa1fd364ea9877a611f8241d16f : SUCCESS in 2m 17s","accounts_in_message":[],"_revision_number":3},{"id":"af5eb3947d74a22abbc6bc132b1b6c92ddf72170","author":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"date":"2022-12-27 23:47:06.000000000","message":"Patch Set 3:\n\n(3 comments)","accounts_in_message":[],"_revision_number":3},{"id":"3c38ba403b86d1e3d0ae66878ccb7dcc32f1e76f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"date":"2022-12-28 00:00:08.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"04eb530b1cea835bfcd6b62bb8c9b38c8b2814ef","author":{"_account_id":31668,"deleted":true},"date":"2022-12-28 00:02:21.000000000","message":"Patch Set 4: Code-Review+1\n\n(2 comments)","accounts_in_message":[],"_revision_number":4},{"id":"929fd2e2a825617c4a1e0ae340112dd3b922a815","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-12-28 00:10:58.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/be6194176f664eeba7d033e4b4b2d9fe\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/409abcecd1b54a36a048ba7648397fe0 : SUCCESS in 4m 47s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/7f76293bbd6f4d0d9df1cc648b7f4323 : SUCCESS in 2m 43s","accounts_in_message":[],"_revision_number":4},{"id":"5141f27e671c6f533115820a64dbda4129197c5c","author":{"_account_id":31857,"name":"Ayumu Ueha","email":"ueha.ayumu@fujitsu.com","username":"ueha"},"date":"2022-12-28 04:21:02.000000000","message":"Patch Set 4: Code-Review+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"2c581052d2f9aaac2d2795ae63385989be9faabe","author":{"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"},"date":"2022-12-28 05:18:15.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"865b2e8a814972f7bfa3bf2ab4b7895121fa6a1c","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-12-28 05:18:35.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"af31bfcee52e0ae4eab8b5f723b3005729dcfb85","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-12-28 05:23:35.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d164f962afc246bcbacb5c8203c1f721\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/7b857b4dbe5a4239bcfd3788b464aa7d : SUCCESS in 4m 23s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c0f2f31e08364221b0e9c699fc99b1d6 : SUCCESS in 2m 39s","accounts_in_message":[],"_revision_number":4},{"id":"a55414d57d7777170fa67a3f66cec4afc1168ccc","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-12-28 05:23:36.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":4},{"id":"e1396cd9ff309210ddacd35513aba9896a3cdc54","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-12-28 05:24:37.000000000","message":"Patch Set 4:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/502f329bc5aa4a1ba2e1c74f5835bcc2\n\n- promote-openstack-specs https://zuul.opendev.org/t/openstack/build/4ec2b7502d084719936fedf5e02ba105 : SUCCESS in 41s","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"2f959940bcd93c59a7bc5f2ab7588303481b07db","revisions":{"8c90fd9fb9eda8fe0775a96a074b491366177a4d":{"kind":"REWORK","_number":1,"created":"2022-12-15 07:50:18.000000000","uploader":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"ref":"refs/changes/63/867763/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/tacker-specs","ref":"refs/changes/63/867763/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/1"}}},"commit":{"parents":[{"commit":"949c4ce423abda4b1c40dfb24699140f36f9dec9","subject":"Add 2023.1 specs directory","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/949c4ce423abda4b1c40dfb24699140f36f9dec9"}]}],"author":{"name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","date":"2022-12-15 07:40:34.000000000","tz":540},"committer":{"name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","date":"2022-12-15 07:49:04.000000000","tz":540},"subject":"Enhancement of Tacker API Resource Access Control","message":"Enhancement of Tacker API Resource Access Control\n\nThis specification describes implements of fine-grained\naccess control based on user and VNF information for API resources.\nIt will extend user information to include role, VIM information, VNF\ninstance information,\nand implement the policy enforcer that uses not only roles, but also\nuser and VNF information.\nThe following items will be supported.\n\n1. Add additional attributes to resources when be created.\n2. Change the API process to support Tacker policy checker.\n3. Add the Tacker policy filter to the list API processes.\n4. Convert special roles to API attributes in context.\n5. Add a configuration option and policy samples.\n\nImplements: blueprint enhance-api-policy\nChange-Id: Ib8f1c83be1bec3644f0fbead46ccd6ab7c2d4e83\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/8c90fd9fb9eda8fe0775a96a074b491366177a4d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/8c90fd9fb9eda8fe0775a96a074b491366177a4d"}]},"branch":"refs/heads/master"},"8da9e1f51538403f83ef64ffc68f042e4f30f39c":{"kind":"REWORK","_number":2,"created":"2022-12-26 12:09:49.000000000","uploader":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"ref":"refs/changes/63/867763/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/tacker-specs","ref":"refs/changes/63/867763/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/2"}}},"commit":{"parents":[{"commit":"949c4ce423abda4b1c40dfb24699140f36f9dec9","subject":"Add 2023.1 specs directory","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/949c4ce423abda4b1c40dfb24699140f36f9dec9"}]}],"author":{"name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","date":"2022-12-15 07:40:34.000000000","tz":540},"committer":{"name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","date":"2022-12-26 12:09:15.000000000","tz":540},"subject":"Enhancement of Tacker API Resource Access Control","message":"Enhancement of Tacker API Resource Access Control\n\nThis specification describes implements of fine-grained\naccess control based on user and VNF information for API resources.\nIt will extend user information to include role, VIM information, VNF\ninstance information,\nand implement the policy enforcer that uses not only roles, but also\nuser and VNF information.\nThe following items will be supported.\n\n1. Add additional attributes to resources when be created.\n2. Change the API process to support Tacker policy checker.\n3. Add the Tacker policy filter to the list API processes.\n4. Convert special roles to API attributes in context.\n5. Add a configuration option and policy samples.\n\nImplements: blueprint enhance-api-policy\nChange-Id: Ib8f1c83be1bec3644f0fbead46ccd6ab7c2d4e83\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/8da9e1f51538403f83ef64ffc68f042e4f30f39c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/8da9e1f51538403f83ef64ffc68f042e4f30f39c"}]},"branch":"refs/heads/master"},"5cac5728543053c0270352c99413002ffb15c53a":{"kind":"REWORK","_number":3,"created":"2022-12-27 23:36:15.000000000","uploader":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"ref":"refs/changes/63/867763/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/tacker-specs","ref":"refs/changes/63/867763/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/3"}}},"commit":{"parents":[{"commit":"949c4ce423abda4b1c40dfb24699140f36f9dec9","subject":"Add 2023.1 specs directory","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/949c4ce423abda4b1c40dfb24699140f36f9dec9"}]}],"author":{"name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","date":"2022-12-15 07:40:34.000000000","tz":540},"committer":{"name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","date":"2022-12-27 12:21:18.000000000","tz":540},"subject":"Enhancement of Tacker API Resource Access Control","message":"Enhancement of Tacker API Resource Access Control\n\nThis specification describes implements of fine-grained\naccess control based on user and VNF information for API resources.\nIt will extend user information to include role, VIM information, VNF\ninstance information,\nand implement the policy enforcer that uses not only roles, but also\nuser and VNF information.\nThe following items will be supported.\n\n1. Add additional attributes to resources when be created.\n2. Change the API process to support Tacker policy checker.\n3. Add the Tacker policy filter to the list API processes.\n4. Convert special roles to API attributes in context.\n5. Add a configuration option and policy samples.\n\nImplements: blueprint enhance-api-policy\nChange-Id: Ib8f1c83be1bec3644f0fbead46ccd6ab7c2d4e83\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/5cac5728543053c0270352c99413002ffb15c53a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/5cac5728543053c0270352c99413002ffb15c53a"}]},"branch":"refs/heads/master"},"2f959940bcd93c59a7bc5f2ab7588303481b07db":{"kind":"REWORK","_number":4,"created":"2022-12-28 00:00:08.000000000","uploader":{"_account_id":34712,"name":"Yuta Kazato","display_name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","username":"kazatoy-ntt"},"ref":"refs/changes/63/867763/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/tacker-specs","ref":"refs/changes/63/867763/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/tacker-specs refs/changes/63/867763/4"}}},"commit":{"parents":[{"commit":"949c4ce423abda4b1c40dfb24699140f36f9dec9","subject":"Add 2023.1 specs directory","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/949c4ce423abda4b1c40dfb24699140f36f9dec9"}]}],"author":{"name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","date":"2022-12-15 07:40:34.000000000","tz":540},"committer":{"name":"Yuta Kazato","email":"yuta.kazato.nw@hco.ntt.co.jp","date":"2022-12-27 23:59:08.000000000","tz":540},"subject":"Enhancement of Tacker API Resource Access Control","message":"Enhancement of Tacker API Resource Access Control\n\nThis specification describes implements of fine-grained\naccess control based on user and VNF information for API resources.\nIt will extend user information to include role, VIM information, VNF\ninstance information,\nand implement the policy enforcer that uses not only roles, but also\nuser and VNF information.\nThe following items will be supported.\n\n1. Add additional attributes to resources when be created.\n2. Change the API process to support Tacker policy checker.\n3. Add the Tacker policy filter to the list API processes.\n4. Convert special roles to API attributes in context.\n5. Add a configuration option and policy samples.\n\nImplements: blueprint enhance-api-policy\nChange-Id: Ib8f1c83be1bec3644f0fbead46ccd6ab7c2d4e83\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/2f959940bcd93c59a7bc5f2ab7588303481b07db"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tacker-specs/commit/2f959940bcd93c59a7bc5f2ab7588303481b07db"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":25701,"name":"Yasufumi Ogawa","email":"yasufum.o@gmail.com","username":"yasufum"}}]}],"submit_requirements":[]}