Tenant can be created via REST despite not matching pattern

Camunda 7 Topics Discussion & Questions
1

I followed this thread and noticed something odd.

The Pattern used for the tenant Id is not used when deploying a Model via REST-API. It is possible possible to deploy a model with the tenantId=test-me which does not match the pattern given in the Documentation. It is not possible to assign Users in the Camunda Cockpit to the tenant thereafter.

Is this intended or just assumed that the REST-Call will be correct?

2

Hi @cnfg,

all API calls, Java and REST, didn’t double check if any userId, groupId or tenantId exist in the database.

The whitelist is only checked when you create new users/groups/tenants.

Hope this helps, Ingo

3