[ https://issues.apache.org/jira/browse/TC-535?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16138657#comment-16138657 ]
ASF GitHub Bot commented on TC-535: ----------------------------------- Github user asfgit commented on the issue: https://github.com/apache/incubator-trafficcontrol/pull/860 Refer to this link for build results (access rights to CI server needed): https://builds.apache.org/job/incubator-trafficcontrol-PR/129/ > DS URL sig key apis needs to have tenancy check in place > -------------------------------------------------------- > > Key: TC-535 > URL: https://issues.apache.org/jira/browse/TC-535 > Project: Traffic Control > Issue Type: Bug > Components: Traffic Ops API > Affects Versions: 2.1.0 > Reporter: Jeremy Mitchell > Assignee: Jeremy Mitchell > Fix For: 2.1.0, 2.2.0 > > > Tenancy was introduced in 2.1, however, by default it is turned off via the > use_tenancy parameter but when activated it is used to limit the scope of > delivery services that a user can act on. > The following APIs needs to check tenancy to ensure users cannot act on ds's > that they don't have access to. > post("/api/$version/deliveryservices/xmlId/:xmlId/urlkeys/generate > post("/api/$version/deliveryservices/xmlId/:xmlId/urlkeys/copyFromXmlId/:copyFromXmlId > get("/api/$version/deliveryservices/xmlId/:xmlId/urlkeys -- This message was sent by Atlassian JIRA (v6.4.14#64029)