Just reviewed the code and looks like this is an issue. We're not checking that the tenant who owns the backup is the same as the tenant who is trying to GET the backup by ID.
We need to fix this.
Just reviewed the code and looks like this is an issue. We're not checking that the tenant who owns the backup is the same as the tenant who is trying to GET the backup by ID.
We need to fix this.