[TC-533] DS SSL key apis needs to have tenancy check in place

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.1.0, 2.2.0
• Component/s: Traffic Ops API
• Assignee: Nir Sopher
• Reporter: Jeremy Mitchell
• Created: 16/Aug/17 18:46
• Updated: 21/Aug/17 19:51
• Resolved: 18/Aug/17 19:03

Description

Tenancy was introduced in 2.1, however, by default it is turned off via the use_tenancy parameter but when activated it is used to limit the scope of delivery services that a user can act on.

The following APIs needs to check tenancy to ensure users cannot act on ds's that they don't have access to.

get("/api/$version/deliveryservices/xmlId/#xmlid/sslkeys
post("/api/$version/deliveryservices/sslkeys/generate
post("/api/$version/deliveryservices/sslkeys/add
get("/api/$version/deliveryservices/xmlId/:xmlid/sslkeys/delete

Issue Links

• links to: GitHub Pull Request #832
• links to: GitHub Pull Request #834
• links to: GitHub Pull Request #835