sergehuber opened a new pull request, #942: URL: https://github.com/apache/unomi/pull/942
## Summary https://issues.apache.org/jira/browse/UNOMI-1031 - A tenant with no `authorizedIPs` (the default for a new tenant) now refuses restricted event types from public API key callers, instead of accepting them from any IP. Restricted types are `sessionCreated`, `sessionReassigned`, `profileUpdated`, `ruleFired`, `updateProperties`, plus the tenant's `restrictedEventTypes`. This matches 3.0, which refused them without a configured third-party server. - Tenant private key and administrator callers (`SecurityService.hasSystemAccess()`) are not IP-checked on REST or GraphQL: they can already change any profile through the private API. - Server-side `EventService.send` is not affected; the check only applies to events submitted by clients. - Manual: multi-tenancy page and a new row in the 3.0→4.0 client-facing hardening table. ## Test plan - [x] Unit tests: new `EventServiceImplTest` case (empty list refuses global and tenant restricted types), new `ProcessEventsCommandTest` case (trusted caller skips the check) - [x] New IT `ContextServletIT.testPublicHttp_protectedEventNeedsAuthorizedIP`: refused with no IPs, accepted once the caller IP is listed - [x] Full IT suite on Elasticsearch locally: 432/432 passed - [ ] Full IT suite on OpenSearch (running locally) / CI 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
