{"push_id":3179924356,"size":6,"distinct_size":6,"ref":"refs/heads/master","head":"5c55e472a4396cfe12078ee31e39dcc181203379","before":"733d170e5bc77db392b149aa8e920a3c7553f353","commits":[{"sha":"acd5d027ecc3d5b8819b0f5772ce114cdbd7a680","author":{"name":"Lance Bragstad","email":"c07efdf7ead33de21c0f28854ad0a94dbdcbb98d@gmail.com"},"message":"Update service provider policies for system reader\n\nThe service provider policies were not taking the default roles work\nwe did last release into account. This commit changes the default\npolicies to rely on the ``reader`` role for get and list service\nproviders. Subsequent patches will incorporate:\n\n - system member test coverage\n - system admin functionality\n - domain users test coverage\n - project users test coverage\n\n Related-Bug: 1804520\n Related-Bug: 1804522\n\nChange-Id: I54fde6f6395b55a0798157346af3188bc756ba50","distinct":true,"url":"https://api.github.com/repos/openstack/keystone/commits/acd5d027ecc3d5b8819b0f5772ce114cdbd7a680"},{"sha":"e22bafa25bced833115530401ef878f5e1d1c7eb","author":{"name":"Lance Bragstad","email":"c07efdf7ead33de21c0f28854ad0a94dbdcbb98d@gmail.com"},"message":"Add service provider tests for system member role\n\nFrom keystone's perspective, the ``member`` and ``reader`` roles are\neffectively the same, isolating writable service provider operations\nto the ``admin`` role.\n\nThis commit adds explicit testing to make sure the ``member`` role is\nallowed to perform readable and not writable service provider\noperations. Subsequent patches will incorporate.\n\n - system admin functionality\n - domain users test coverage\n - project users test coverage\n\n Related-Bug: 1804520\n Related-Bug: 1804522\n\nChange-Id: Iecc39d5e4f1a4dc9293e67ee86f23f9a119793a8","distinct":true,"url":"https://api.github.com/repos/openstack/keystone/commits/e22bafa25bced833115530401ef878f5e1d1c7eb"},{"sha":"131acaccaf36b640056dd5bf90a7730bc8d04d28","author":{"name":"Colleen Murphy","email":"387ba1943871e60965e6b44638a2f2e1ab9b8469@gazlene.net"},"message":"Restructure federation guide\n\nHaving everything on a single page is nice for ctrl-F-ability but it\nmakes the flow very confusing. This change breaks the guide into three\nlogical parts: the introduction, the configuration steps, and the\nadvanced mapping rules guide. Keeping all the configuration steps within\none page means it can still be searched easily, but removing the prose\nof the introduction and breaking out the deep-dive mapping rules guide\nreduces clutter and enhances readability.\n\nPartial-bug: #1793374\n\nChange-Id: Id2fd59d62a2675691d545e4cd0404558f00cf481","distinct":true,"url":"https://api.github.com/repos/openstack/keystone/commits/131acaccaf36b640056dd5bf90a7730bc8d04d28"},{"sha":"04f67b74021bf39f9e9bd456457249b9b7776903","author":{"name":"Zuul","email":"824662dd828adcec0bfbb1c6955f2603475eeec7@review.openstack.org"},"message":"Merge \"Update service provider policies for system reader\"","distinct":true,"url":"https://api.github.com/repos/openstack/keystone/commits/04f67b74021bf39f9e9bd456457249b9b7776903"},{"sha":"f9dc87ace75c48d3e2d2cb6f482d29e223901da5","author":{"name":"Zuul","email":"824662dd828adcec0bfbb1c6955f2603475eeec7@review.openstack.org"},"message":"Merge \"Add service provider tests for system member role\"","distinct":true,"url":"https://api.github.com/repos/openstack/keystone/commits/f9dc87ace75c48d3e2d2cb6f482d29e223901da5"},{"sha":"5c55e472a4396cfe12078ee31e39dcc181203379","author":{"name":"Zuul","email":"824662dd828adcec0bfbb1c6955f2603475eeec7@review.openstack.org"},"message":"Merge \"Restructure federation guide\"","distinct":true,"url":"https://api.github.com/repos/openstack/keystone/commits/5c55e472a4396cfe12078ee31e39dcc181203379"}]}
{"actor":{"display_login":"openstack-gerrit"}}