[GitHub] moltzaum opened a new issue #3164: Read-only user can create cdns

[GitBox <gi...@apache.org>]

moltzaum opened a new issue #3164: Read-only user can create cdns
URL: https://github.com/apache/trafficcontrol/issues/3164
 
 
   Logging in with a read-only user and posting a cdn results in the following:
   ```
   {
     "alerts": [
       {
         "text": "Forbidden.",
         "level": "error"
       }
     ]
   }
   {
     "alerts": [
       {
         "text": "cdn was created.",
         "level": "success"
       }
     ],
     "response": {
       "dnssecEnabled": false,
       "domainName": "new_name",
       "id": 2,
       "lastUpdated": "2018-12-27 17:41:25+00",
       "name": "cdn"
     }
   }
   ```
   The odd thing is that there is a forbidden error, but the cdn gets created anyway.
   
   A similar issue is mentioned in #3116, which mentions tenancy as the problem. I did not test this with different tenancies for the read-only user (everything was done with the root tenant). Changing the global `use_tenancy` parameter did not seem to change anything though.
   
   I doubt this is a tenancy problem, but if it is it might get fixed by #3163.
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services