search

wso2 / product-apim

Welcome to the WSO2 API Manager source code! For info on working with the WSO2 API Manager repository and contributing code, click the link below.
http://wso2.github.io/
Apache License 2.0
846 stars 785 forks source link

Cross tenant subscription is not allowed in Dev portal #8913

Closed Chamindu36 closed 4 years ago

Chamindu36 commented 4 years ago

Description:

When a user tries to subscribe to an API using an application owned by a tenant who is not the owner of API is not permitted simply because the subscribe button in Devportal is not available. Because of this issue, cross tenant subscription cannot be facilitated.

Annotation 2020-08-01 021152

Steps to reproduce:

  1. Create an Application "App1" in Devportal as admin of Tenant1 (This App will be owned by tenant 1).
  2. Log out from tenant 2 and log in to publisher as Admin of Tenant2.
  3. Create "API1" is an API with public store visibility and owned by Tenant2.
  4. Change Life cycle state to "Published"
  5. Navigate to dev Portal and navigate to "GO TO PUBLIC DEVPORTAL"
  6. Then navigate to "Tenant1"
  7. Then click on that and select API1 and try to subscribe to that API1 using App1

Affected Product Version:

3.2.0 Rc1

Environment details (with versions):

Arshardh commented 4 years ago

We are deprecating cross tenant subscriptions: https://github.com/wso2/product-apim/issues/8801 so this is expected.