search

apigee / apigee-edge-drupal

The Apigee Edge module enables you to integrate a Drupal 9 or 8 site with Apigee.
https://www.drupal.org/project/apigee_edge
GNU General Public License v2.0
32 stars 45 forks source link

Developer creation is not working without POST permission to /developers #764

Closed mxr576 closed 1 year ago

mxr576 commented 1 year ago

Description

We are investigating an issue with a customer that I haven't seen before in my long journey with Apigee. It looks like having PUT permission to the /developers endpoint is not enough for the devportal to create developers on Apigee. (Permissions configured accordingly to this matrix: https://github.com/apigee/apigee-edge-drupal/blob/5857361da977b94d6fccc46f473f3f1958f3ab61/src/Command/Util/ApigeeEdgeManagementCliService.php#L140-L161)

I have only spotted one "special" feature flag on the related Apigee org's configuration. Could it happen that the features.keymanagement.disable.unbounded.permissions feature flag has this additional side effect?

According to the related changelog/documentation it should not be, but I have no other idea: https://docs.apigee.com/release/notes/180202-apigee-edge-public-cloud-release-notes

Or what other feature flag can cause this? Maybe the default permission matrix needs an audit in this module?

Apigee Info

Apigee Edge

github-actions[bot] commented 1 year ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

giteshk commented 1 year ago

Addressed as a part of #809

mxr576 commented 1 year ago

@giteshk Are you sure it was address? In #809 I only see modifications related to #766, but not for this one. I believe to fix this, the quoted code in the description needed to be changed.

giteshk commented 1 year ago

@phdhiren to validate.