Users cannot create Apikeys.

[hibooboo2]

Users cannot create an api key for their account in the api. Admin can, users cannot.

To duplicate, make an account, then create an apikey for that account. Now use that apikey to auth as that user and try to make an apikey you cannot. you get a 405.

[sangeethah]

Tested with build from master - Dec 4.
Turned local auth on.
Create an account of type "user".
When logged in as this user and created apikey using http://:8080/v1/apikeys.
Able to log in to http://:8080/v1/ using the keys that was created.

@hibooboo2 , could you please confirm if these steps validate the fix provided?

[hibooboo2]

That sounds correct. Just confirm that the headers that show the account id have the account id for the user that was supposed to create the apikey and not an environment unless you are using the apikey to access an environment that the user has access too.

[sangeethah]

When I access http://:8080/v1/ using the keys that was created , I can confirm that I am logged in as the user for which the keys was created.