ref: Begin deprecating category from localities - #123250
Merged
Merged
@sentry/warden / warden: security-review
completed
Aug 31, 2026 in 0s
1 issue
security-review: Found 1 issue (1 medium)
Medium
Single-tenant locality org-creation guard dropped for default-open signup_visible - `src/sentry/core/endpoints/organization_index.py:108-109`
Non-staff org creation now allows any locality with visible and signup_visible true, and no longer rejects SINGLE_TENANT by category. Because signup_visible defaults to true, a visible single-tenant locality name in dataStorageLocation can be used to provision orgs into dedicated cells unless every ST locality is explicitly configured signup_visible=false.
⏱ 5m 8s · 2.2M in / 90.5k out · $1.72
Annotations
Check warning on line 109 in src/sentry/core/endpoints/organization_index.py
sentry-warden / warden: security-review
Single-tenant locality org-creation guard dropped for default-open signup_visible
Non-staff org creation now allows any locality with visible and signup_visible true, and no longer rejects SINGLE_TENANT by category. Because signup_visible defaults to true, a visible single-tenant locality name in dataStorageLocation can be used to provision orgs into dedicated cells unless every ST locality is explicitly configured signup_visible=false.
Loading