mitchell852 commented on issue #4518: Add service category feature to TO and TP
URL: https://github.com/apache/trafficcontrol/pull/4518#issuecomment-600753108
 
 
   Something to think about. Should "service categories" be restricted to 
certain tenants? For example, imagine the following tenant tree:
   
   ```
   - root
   -- tenant 1
   --- tenant 1.1
   -- tenant 2
   --- tenant 2.1
   ```
   
   If I am a user in tenant 2.1 and i create a Foo service category, should 
users in root, tenant 1, 1.1, 2 be able to attach the Foo service category to 
their delivery services? Maybe that's not a problem as the tenant 2.1 user will 
still only see delivery services scoped to tenant 2.1 in that category. 
However, this could potentially result in information leakage across tenants. 
I.e. if i'm in the company A tenant and i create a 
company-a-service-category-1, everybody across all tenants can see/use that 
service category.
   
   The more I think about this, service categories should be scoped to tenancy. 
most tenants don't want to be concerned with the service categories created by 
other tenants.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to