[TC-532] PUT /api/$version/deliveryservices/:id/safe needs to have tenancy check in place

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Component/s: Traffic Ops API
• Assignee: Dylan Volz
• Reporter: Jeremy Mitchell
• Created: 16/Aug/17 18:34
• Updated: 28/Aug/17 15:57
• Resolved: 28/Aug/17 15:57

Description

Tenancy was introduced in 2.1, however, by default it is turned off via the use_tenancy parameter but when activated it is used to limit the scope of delivery services that a user can act on.

PUT /api/$version/deliveryservices/:id/safe needs to check tenancy to ensure users do not attempt to update ds's that they don't have access to.