Creating an invalidate content request (purge) on a delivery service should check tenancy (if turned on)

[mitchell852]

The following API route is used to create an "Invalidate content" (aka purge request) on a delivery service:

$r->post("/api/$version/user/current/jobs")->over( authenticated => 1, not_ldap => 1 )->to( 'Job#create_current_user_job', namespace => $namespace );

This route current checks:

if role is ops (or higher) OR if delivery service is assigned to user.

instead it should follow this logic:

if (use_tenancy = 1) { check tenancy on delivery service }
else { check if role is ops (or higher) OR if delivery service is assigned to user }

[mitchell852]

@nir-sopher - i'm going to take a crack at this one