)]}'
{"environments/enable-secure-rbac.yaml":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"96c99108120bd2e663f5ed0ae93ec9e6b6280943","unresolved":true,"context_lines":[{"line_number":4273,"context_line":"      value: \"rule:admin_api or (role:reader and (project_id:%(node.owner)s or project_id:%(node.lessee)s))\""},{"line_number":4274,"context_line":"    ironic-baremetal_port_list:"},{"line_number":4275,"context_line":"      key: \"baremetal:port:list\""},{"line_number":4276,"context_line":"      value: \"role:reader\""},{"line_number":4277,"context_line":"    ironic-baremetal_port_list_all:"},{"line_number":4278,"context_line":"      key: \"baremetal:port:list_all\""},{"line_number":4279,"context_line":"      value: \"rule:admin_api\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"e50ffa89_b0e95eb5","line":4276,"updated":"2021-09-22 15:34:38.000000000","message":"Should this be project-scoped with rule:admin_api?","commit_id":"37947219d2482e36b1b84ab67718f26f84d63ae0"},{"author":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"change_message_id":"7959757b90ebf59adb338a78e2069cf66c0c5695","unresolved":true,"context_lines":[{"line_number":4273,"context_line":"      value: \"rule:admin_api or (role:reader and (project_id:%(node.owner)s or project_id:%(node.lessee)s))\""},{"line_number":4274,"context_line":"    ironic-baremetal_port_list:"},{"line_number":4275,"context_line":"      key: \"baremetal:port:list\""},{"line_number":4276,"context_line":"      value: \"role:reader\""},{"line_number":4277,"context_line":"    ironic-baremetal_port_list_all:"},{"line_number":4278,"context_line":"      key: \"baremetal:port:list_all\""},{"line_number":4279,"context_line":"      value: \"rule:admin_api\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"fc03ea8c_3fcf99ac","line":4276,"in_reply_to":"e50ffa89_b0e95eb5","updated":"2021-09-22 15:59:03.000000000","message":"role:reader is likely okay here. If a user doesn\u0027t match baremetal:port:list_all, then they this allows them to pull a list *if* they can see it in terms of the node being allocated to their project.","commit_id":"37947219d2482e36b1b84ab67718f26f84d63ae0"}]}