Skip to content

Sharees get 403 instead of 404 when sharing a share - #984

Merged
elenasharma merged 7 commits into
cloudfoundry:masterfrom
cloudfoundry-incubator:pr-service-instance-sharing-sharee-sharing-a-share
Nov 16, 2017
Merged

Sharees get 403 instead of 404 when sharing a share#984
elenasharma merged 7 commits into
cloudfoundry:masterfrom
cloudfoundry-incubator:pr-service-instance-sharing-sharee-sharing-a-share

Conversation

@deniseyu

@deniseyu deniseyu commented Nov 9, 2017

Copy link
Copy Markdown
Contributor

As an app dev (receiver), I cannot share a service instance that has been shared with me where I do not have access to the service instance. #151441010

NOTE: This PR builds on top of #983, which should be merged first. The actual changes on top of #983 can be viewed in this diff.

What

Previously, a developer in a space that received a shared service instance could not attempt to share that instance to further spaces. This resulted in a 404. This PR changes the error code to be 403 Not Authorized. Users who lack read access to the source space, but have access to one of the spaces to which the service instance is shared will experience this change. All others that lack read access will continue to receive 404.

PR

  • I have viewed signed and have submitted the Contributor License Agreement
  • I have made this pull request to the master branch
  • I have run all the unit tests using bundle exec rake
  • I have run CF Acceptance Tests on bosh lite

Thanks, sapi (@jenspinney and @deniseyu)

@cfdreddbot

Copy link
Copy Markdown

Hey deniseyu!

Thanks for submitting this pull request! I'm here to inform the recipients of the pull request that you and the commit authors have already signed the CLA.

@cf-gitbot

Copy link
Copy Markdown

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/152721175

The labels on this github issue will be updated when the story is started.

Derik Evangelista and others added 7 commits November 16, 2017 16:38
* The broker can return a shareable field as part of the service metadata
response to /v2/catalog.

[#152540454]

Signed-off-by: Sam Gunaratne <sgunaratne@pivotal.io>
… instance

* This behaviour already existed, this commit just adds additional tests

[#150973376]

Signed-off-by: Denise Yu <dyu@pivotal.io>
* Only developers who have write access to the service instance
can perform an update.

[#150973390]

Signed-off-by: Derik Evangelista <devangelista@pivotal.io>
or unshare

[#151441010]

Signed-off-by: Denise Yu <dyu@pivotal.io>
@deniseyu
deniseyu force-pushed the pr-service-instance-sharing-sharee-sharing-a-share branch from becba4a to 9325544 Compare November 16, 2017 16:43
@elenasharma
elenasharma merged commit 1a44921 into cloudfoundry:master Nov 16, 2017
@deniseyu
deniseyu deleted the pr-service-instance-sharing-sharee-sharing-a-share branch November 28, 2017 16:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants