servicecatalog / development

An Enterprise-ready Cloud Services Management Software
http://openservicecatalogmanager.org
Apache License 2.0
39 stars 27 forks source link

Multitenancy: Supplier can register Customer for different tenant #631

Open MiethanerR opened 7 years ago

MiethanerR commented 7 years ago

[Version] 16.1 fix7+ 2017/03/30

[How to reproduce]

  1. Configure default tenant (D) and one additional tenant (A)
  2. Create Marketplace Owner and Marketplace in D
  3. Create Marketplace Owner and Marketplace in A
  4. Register new customer as Marketplace Owner in D for Marketplace in A

[Expected result] Not possible / Exception because of different tenant

[Observed result] New user is registered

[Comment] There has to be a check added for UI und SOAP if the tenant of the customer, supplier and the marketplace are identical.

GoebelL commented 7 years ago

Given scenario needs to be covered by SOAP API tests.

badziakp commented 7 years ago

What about marketplaces which are not assigned to any tenant? Should they be seen in the drop down list, in this case, or not? Or maybe tenantid of the marketplace owner organization has to be checked?