ref: Begin deprecating category from localities - #123250
Merged
Merged
@sentry/warden / warden: wrdn-authz
completed
Aug 31, 2026
1 issue
wrdn-authz: Found 1 issue (1 medium)
Medium
Single-tenant locality org-creation guard dropped for default-open signup_visible - `src/sentry/core/endpoints/organization_index.py:108-109`
In deployments retaining legacy SINGLE_TENANT locality configurations without an explicit signup_visible value, non-staff users can submit that locality through dataStorageLocation and provision organizations into its dedicated cell. The locality parser defaults omitted signup_visible to true, while the org-creation validator checks only visible and signup_visible and no longer enforces the single-tenant category boundary.
⏱ 11m · 3.7M in / 100.8k out · $2.17
Annotations
Check warning on line 109 in src/sentry/core/endpoints/organization_index.py
sentry-warden / warden: wrdn-authz
Single-tenant locality org-creation guard dropped for default-open signup_visible
In deployments retaining legacy `SINGLE_TENANT` locality configurations without an explicit `signup_visible` value, non-staff users can submit that locality through `dataStorageLocation` and provision organizations into its dedicated cell. The locality parser defaults omitted `signup_visible` to true, while the org-creation validator checks only `visible` and `signup_visible` and no longer enforces the single-tenant category boundary.
Loading