[ ] GET /credentials only lists members of currently authorized tenant.
[ ] GET /credentials has no specific resource ID (for now).
[ ] When requested by a superuser, GET /credentials lists all credentials, unless atenant=_current filter is specified in query.
[ ] GET /credentials/{cred_id} returns credentials info only if it is a member of the current tenant or if requested by a superuser (otherwise return 404).
[ ] GET /credentials/{cred_id} has no specific resource ID (for now).
Proposed changes
GET /credentials
only lists members of currently authorized tenant.GET /credentials
has no specific resource ID (for now).GET /credentials
lists all credentials, unlessatenant=_current
filter is specified in query.GET /credentials/{cred_id}
returns credentials info only if it is a member of the current tenant or if requested by a superuser (otherwise return 404).GET /credentials/{cred_id}
has no specific resource ID (for now).