[ 
https://issues.apache.org/jira/browse/TC-217?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15972417#comment-15972417
 ] 

Nir Sopher edited comment on TC-217 at 4/18/17 12:42 PM:
---------------------------------------------------------

Hi,
I believe we need to distinguish between the 2 terminologies: 
"descendent-tenants", and "allowed-tenants".
A tenants has "descendent-tenants", all the tenants beneath it in the hierarchy.
A user has its "allowed-tenants" - tenants he can view and manage.

Currently, the to terms are closely related - the "allowed-tenants" of a user 
are the "descendent-tenants" of the user's tenant.
But this is not necessarily the case.
There are a few futuristic examples for users need to be able to view tenants 
not in his own tenant hierarchy. 
For example, when we have multiple ISPs in the TC, none of which can be "root" 
tenant, but the users of this tenants need to be able to view "org-tenants" in 
order to work with their delivery services.

Therefore we suggested that:
api/1.2/tenants - will show all tenants. Only tenants viewable to the current 
user will be shown.
api/1.2/tenants/:id/subtenants - will show all "tenants" decendent to the 
specified one (still, under the limitation of what the current user can view)

Do we need additionally
 api/1.2/users/:id/tenants - get all the tenants viewable to the specified user 
(still, under the limitation of what the current user can view)
?

Nir



was (Author: nirsopher):
Hi,
I believe we need to distinguish between the 2 terminologies: 
"descendent-tenants", and "allowed-tenants".
A tenants has "descendent-tenants", all the tenants beneath it in the hierarchy.
A user has its "allowed-tenants" - tenants he can view and manage.

Currently, the to terms are closely related - the "allowed-tenants" of a user 
are the "descendent-tenants" of the user's tenant.
But this is not necessarily the case.
There are a few futuristic examples for users need to be able to view tenants 
not in his own tenant hierarchy. 
For example, when we have multiple ISPs in the TC, none of which can be "root" 
tenant, but the users of this tenants need to be able to view "org-tenants" in 
order to work with their delivery services.

Therefore we suggested that:
api/1.2/tenants - will show all tenants view-able to the current user.
api/1.2/tenants/:id/subtenants - will show all "tenants" decendent to the 
specified one (still, under the limitation of what the current user can view)

Do we need additionally
 api/1.2/users/:id/tenants - get all the tenants viewable to the specified user 
(still, under the limitation of what the current user can view)
?

Nir


> Self Service - CRUD Sub Tenant
> ------------------------------
>
>                 Key: TC-217
>                 URL: https://issues.apache.org/jira/browse/TC-217
>             Project: Traffic Control
>          Issue Type: New Feature
>          Components: Traffic Ops, Traffic Ops API
>            Reporter: Ashish Timilsina
>
> Allow users to CRUD sub tenants below their tenant level or below any 
> sub-tenant level they choose. Default would be directly below the current 
> tenant value.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to