>_
.issue.db
/highway
Dashboard
Issues
Memory
Lessons
Audit Log
New Issue
Edit Issue #1028
Update issue details
Title *
Description
Found during #1020 (live): GET /api/v1/analytics/queues?tenant_id=nosuchtenant1020 as admin@test: require_permission catches 'Tenant not found: nosuchtenant1020' from the auth library and returns 500 {status:error,error:'Permission check failed'} (before #1020 spectree turned it into a 500 pydantic list; after #1020 the body is served as written, still 500). Same for a JWT whose tenant does not exist. EARS: If the request names a tenant that does not exist, then the API shall answer 403 (or 404) without a 500 and without logging a stack trace at ERROR.
Priority
Low
Medium
High
Critical
Status
Open
In Progress
Closed
Won't Do
Due Date (YYYY-MM-DD)
Tags (comma separated)
Related Issues (IDs)
Enter IDs of issues related to this one. They will be linked as 'related'.
Update Issue
Cancel