[
https://issues.apache.org/jira/browse/TC-533?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16133392#comment-16133392
]
ASF GitHub Bot commented on TC-533:
-----------------------------------
GitHub user mitchell852 opened a pull request:
https://github.com/apache/incubator-trafficcontrol/pull/835
[BACKPORT] [TC-533] - ssl_keys - tenancy checks
(cherry picked from commit 01452c99a0fc4d459742a67bad3bab9f20fcf4e6)
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/mitchell852/incubator-trafficcontrol
2.1.x-ssl-keys-tenant-tc-533
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-trafficcontrol/pull/835.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #835
----
commit 625181df3e872721a3f814660fbc21505fcd24ee
Author: nir-sopher <n...@qwilt.com>
Date: 2017-08-13T16:01:38Z
ssl_keys - tenancy checks
(cherry picked from commit 01452c99a0fc4d459742a67bad3bab9f20fcf4e6)
----
> DS SSL key apis needs to have tenancy check in place
> ----------------------------------------------------
>
> Key: TC-533
> URL: https://issues.apache.org/jira/browse/TC-533
> Project: Traffic Control
> Issue Type: Bug
> Components: Traffic Ops API
> Affects Versions: 2.1.0
> Reporter: Jeremy Mitchell
> Assignee: Nir Sopher
> Fix For: 2.1.0, 2.2.0
>
>
> Tenancy was introduced in 2.1, however, by default it is turned off via the
> use_tenancy parameter but when activated it is used to limit the scope of
> delivery services that a user can act on.
> The following APIs needs to check tenancy to ensure users cannot act on ds's
> that they don't have access to.
> get("/api/$version/deliveryservices/xmlId/#xmlid/sslkeys
> post("/api/$version/deliveryservices/sslkeys/generate
> post("/api/$version/deliveryservices/sslkeys/add
> get("/api/$version/deliveryservices/xmlId/:xmlid/sslkeys/delete
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
