v4.0.0 Resources not defined doesn't restrict access to those endpoints.

[DavidCGarcia89]

Description:

If I have an API in NodeJS with the endpoints "/users" and "/data". Then in the API manager I create a new API and define the resource "/users". The I go to the devportal, I create an App with credentials to access the API. Then with postman I get the credentials of the App and send the request to the API created. I can access all the resources even if I didn't define all of them in the resource tab. In the version 3.2.0 I can only access to the ones I defined in the resources tab.

Steps to reproduce:

• Create a new API REST in the publisher.
• Create an Application in the devportal and suscribe to the API REST created.
• Register an endpoint in the resource tab.
• Try to access to another endpoint that is not defined.

Affected Product Version:

4.0.0

Environment details (with versions):

• OS: Ubuntu 18.04

[DavidCGarcia89]

Solution:

You need to release a new Revision for the current version of the App.

If not it will get the default resources with the /*