- Shipped
- 2 ஆகஸ்ட், 2026 அன்று 6:25 PM UTC
- Author
- Kamo
- Commit
- 6b2cae4
The handler was `public void **************** Long id)` — no HttpServletRequest parameter at all, calling straight through to a bare deleteById. With ResourceServerConfig permitting every request and APIService relaying /api/security/** without gateway auth, destroying any tenant was one anonymous request against a sequential Long id. Nothing in the product calls it: the kamo-internal BFF at **************** exports only GET and PUT. Deleting a tenant is a platform-staff action, so require an authenticated session with god mode actually activated — eligibility (GD) alone is not enough, which the test pins.