XSUAA instance shared across customers ?

[yannmiquel]

Hi,

After creating a xsuaa instance with common name (like myxsuaa-1234), I've got the following error while updating it with the security json: "Cannot change AppId with update."

We don't have any app with this kind of name (and yes I can see all Spaces/Org). So I tried to update it with this name

and it works !

So now, I'm concerned about the ability for anyone to update MY xsuaa service instance as long as they found its name.

But with a very complicated name there is no conflict anymore !

We are using a CPEA pricing and are on eu10. I've not experience this issue in another global account, also eu10 but with subscription pricing.

Please give me your thoughts on this point. Thanks

Yann

[lucasvaccaro]

Hi,

Did you specify the xsappname when creating the instance? The long ID looks like a random one, which is assigned when it is not specified initially. After that, you cannot change it. Note that the name of service instance and the xsappname are different things.

Besides that, only users with SpaceDeveloper role in the respective space can modify the service instance, so there is no reason to be concerned.

Best regards,
Lucas

[yannmiquel]

Hi Lucas,I created the instance with the json, so there is no xsappname previously in it.