[ https://issues.apache.org/jira/browse/TC-532?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dylan Volz resolved TC-532. --------------------------- Resolution: Fixed https://github.com/apache/incubator-trafficcontrol/pull/867 > PUT /api/$version/deliveryservices/:id/safe needs to have tenancy check in > place > -------------------------------------------------------------------------------- > > Key: TC-532 > URL: https://issues.apache.org/jira/browse/TC-532 > Project: Traffic Control > Issue Type: Bug > Components: Traffic Ops API > Affects Versions: 2.1.0 > Reporter: Jeremy Mitchell > Assignee: Dylan Volz > > Tenancy was introduced in 2.1, however, by default it is turned off via the > use_tenancy parameter but when activated it is used to limit the scope of > delivery services that a user can act on. > PUT /api/$version/deliveryservices/:id/safe needs to check tenancy to ensure > users do not attempt to update ds's that they don't have access to. -- This message was sent by Atlassian JIRA (v6.4.14#64029)