In master tenant Product: Master Service should not have accessible pages. Now is possible access pages by entering url like

/apiconfig/services/{service_id}/metrics

in master tenant which shouldn't be accessible.

All pages which shouldn't be accessible:

• /apiconfig/services/1/proxy_rules
• /apiconfig/services/1/metrics
• /apiconfig/services/1/policies/edit
• /apiconfig/services/1/backend_usages