moltzaum opened a new issue #3164: Read-only user can create cdns URL: https://github.com/apache/trafficcontrol/issues/3164 Logging in with a read-only user and posting a cdn results in the following: ``` { "alerts": [ { "text": "Forbidden.", "level": "error" } ] } { "alerts": [ { "text": "cdn was created.", "level": "success" } ], "response": { "dnssecEnabled": false, "domainName": "new_name", "id": 2, "lastUpdated": "2018-12-27 17:41:25+00", "name": "cdn" } } ``` The odd thing is that there is a forbidden error, but the cdn gets created anyway. A similar issue is mentioned in #3116, which mentions tenancy as the problem. I did not test this with different tenancies for the read-only user (everything was done with the root tenant). Changing the global `use_tenancy` parameter did not seem to change anything though. I doubt this is a tenancy problem, but if it is it might get fixed by #3163.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
