Re: CF disable-service-access broken


Zach Robinson
 

Hello Prasad,

This is actually expected behavior. You can find documentation about service access here https://docs.cloudfoundry.org/services/access-control.html. It notes a limitation at the bottom.

"You cannot disable access to a service plan for an org if the plan is currently available to all orgs. You must first disable access for all orgs; then you can enable access for a particular org."

This is because service access works in two modes: 1) available to everybody. 2) available in a whitelist to specific organizations.

Service access does NOT work as a blacklist.

The example you posted shows it as available to all, which means it is in the first mode I listed. If you want more granular control, then you will need to disable access for all orgs, and then whitelist each org that should have access.

-Zach

Join cf-dev@lists.cloudfoundry.org to automatically receive all group messages.