Skip to content

multi-tenancy: Space admin can still list spaces from all tenants #1664

@rhafer

Description

@rhafer

Describe the bug

In a multi-tenant setup, any user with the role SpaceAdmin can list all space from all tenants

Steps to reproduce

  1. deploy a multi-tenant enabled OpenCloud (e.g. using Multi tenant compose example for testings/development #1637)
  2. assign one user from each tenant the role SpaceAdmin using keycloak
  3. As a SpaceAdmin of the first tenant create a new Space (no need to assign any users to it)
  4. As the SpaceAdmin of the second tenant open the Admin Settings -> Spaces page.
  5. The Space created for tenant one is listed.

Expected behavior

Only Space from the same tenant are visible to a SpaceAdmin

Metadata

Metadata

Assignees

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions