-
Sub-task
-
Resolution: Done
-
Minor
-
ACM 2.15.0
-
Product / Portfolio Work
-
2
-
False
-
-
False
-
-
Description:
Currently, the mtv-integrations webhook checks authorization on the destination Provider for all Plans, regardless of how the Provider was created.This causes issues when a user manually creates a Provider and attempts to create a Plan using that Provider—authorization fails in this scenario.
To address this, update the webhook logic to only perform authorization checks if the destination Provider in the Plan was created by the mtv-integrations controller. These automatically created Providers have a -mtv suffix in their name.
This change ensures that manually created Providers are excluded from webhook authorization checks, allowing users to proceed with custom Plans.
Acceptance Criteria
- Suffix-Based Filtering
The webhook must only perform authorization checks on destination Providers whose names end with -mtv.
- Skip Manual Providers
If the destination Provider does not have the -mtv suffix (i.e., manually created), the webhook must skip the authorization check.
- No Impact to Existing Behavior
Plans using -mtv Providers must continue to undergo authorization checks as before.
- Test Coverage
Unit or integration tests must validate:
-
- Authorization is triggered for -mtv Providers.
-
- Authorization is skipped for non--mtv Providers.