M22 AZURE - Not Able to Retrieve Subproject Metadata

Hello,

I'm trying to create a new subproject via postman and retrieve the subproject metadata but I'm getting status 403 Forbidden (Step 5). Other thing I've noticed is when I List the subproject in a tenant, even with a legal that in the body for the subproject creation (Step 4), the created project does not have a legal tag associated (Step6). What could be wrong? Here is what I'm doing:

• Collection: Azure_OSDU_Smoke_Tests.postman_collection.json
• Environment: Verify_Preshipping_New_TeamA-E.postman_environment.json

1. Create a Legal Tag

POST https://{{LEGAL_HOST}}/legaltags

BODY CURL VERSION

curl --location 'https://osdu-ship.msft-osdu-test.org/api/legal/v1/legaltags' \
--header 'Content-Type: application/json' \
--header 'data-partition-id: opendes' \
--header 'Authorization: Bearer <Token>' \
--data '{
    "name": "opendes-SeismicDMS-Legal-Tag-Test9295727",
    "description": "Legal Tag added for VDS to VDS testing",
    "properties": {
        "contractId": "123456",
        "countryOfOrigin": [
            "US",
            "CA"
        ],
        "dataType": "Public Domain Data",
        "exportClassification": "EAR99",
        "originator": "Schlumberger",
        "personalData": "No Personal Data",
        "securityClassification": "public",
        "expirationDate": "2025-12-25"
    }
}'

BODY

{
    "name": "{{tagName}}",
    "description": "Legal Tag added for VDS to VDS testing",
    "properties": {
        "contractId": "123456",
        "countryOfOrigin": [
            "US",
            "CA"
        ],
        "dataType": "Public Domain Data",
        "exportClassification": "EAR99",
        "originator": "Schlumberger",
        "personalData": "No Personal Data",
        "securityClassification": "public",
        "expirationDate": "2025-12-25"
    }
}

RESPONSE

{
    "name": "opendes-SeismicDMS-Legal-Tag-Test9295727",
    "description": "Legal Tag added for VDS to VDS testing",
    "properties": {
        "countryOfOrigin": [
            "US",
            "CA"
        ],
        "contractId": "123456",
        "expirationDate": "2025-12-25",
        "originator": "Schlumberger",
        "dataType": "Public Domain Data",
        "securityClassification": "public",
        "personalData": "No Personal Data",
        "exportClassification": "EAR99"
    }
}

2. Register a new tenant

POST https://{{SEISMICDMS_HOST}}/tenant/{{data-partition-id}}

BODY CURL VERSION

curl --location 'https://osdu-ship.msft-osdu-test.org/seistore-svc/api/v3/tenant/opendes' \
--header 'Content-Type: application/json' \
--header 'data-partition-id: opendes' \
--header 'Authorization: Bearer <Token>' \
--data-raw '{
  "gcpid": "AutoTest_project_id",
  "esd": "opendes.contoso.com",
  "default_acl": "users.datalake.admins@opendes.contoso.com"
}'

BODY

{
  "gcpid": "AutoTest_project_id",
  "esd": "{{data-partition-id}}{{domain}}",
  "default_acl": "users.datalake.admins@{{data-partition-id}}{{domain}}"
}

RESPONSE

[seismic-store-service] The tenant opendes has been registered already

3. Retrieve Tenant Metadata

GET https://{{SEISMICDMS_HOST}}/tenant/{{data-partition-id}}

BODY CURL VERSION

curl --location 'https://osdu-ship.msft-osdu-test.org/seistore-svc/api/v3/tenant/opendes' \
--header 'Content-Type: application/json' \
--header 'data-partition-id: opendes' \
--header 'Authorization: Bearer <Token>'

RESPONSE

{
    "name": "opendes",
    "esd": "opendes.contoso.com",
    "gcpid": "AutoTest_project_id",
    "default_acls": "users.datalake.admins@opendes.contoso.com"
}

4. Create a new subproject

POST https://{{SEISMICDMS_HOST}}/subproject/tenant/{{data-partition-id}}/subproject/{{subprojectid}}

BODY CURL VERSION

curl --location 'https://osdu-ship.msft-osdu-test.org/seistore-svc/api/v3/subproject/tenant/opendes/subproject/subprojectodi595608' \
--header 'Content-Type: application/json' \
--header 'data-partition-id: opendes' \
--header 'ltag;' \
--header 'Authorization: Bearer <Token>' \
--data-raw '{
    "admin": "admin@opendes.contoso.com",
    "storage_class": "MULTI_REGIONAL",
    "storage_location": "US",
    "acls": {
        "admins": [
            "data.sdms.opendes.subprojectodi595608.admin@opendes.contoso.com"
        ],
        "viewers": [
            "data.sdms.opendes.subprojectodi595608.viewer@opendes.contoso.com"
        ]
    },
    "legal": {
        "legaltags": [
            "opendes-SeismicDMS-Legal-Tag-Test1358259"
        ],
        "otherRelevantDataCountries": [
            "US"
        ]
    }
}'

BODY

{
    "admin": "admin@{{data-partition-id}}{{domain}}",
    "storage_class": "MULTI_REGIONAL",
    "storage_location": "US",
    "acls": {
        "admins": [
            "data.sdms.{{autotestTenantid}}.{{subprojectid}}.admin@{{data-partition-id}}{{domain}}"
        ],
        "viewers": [
            "data.sdms.{{autotestTenantid}}.{{subprojectid}}.viewer@{{data-partition-id}}{{domain}}"
        ]
    },
    "legal": {
        "legaltags": [
            "{{tagName}}"
        ],
        "otherRelevantDataCountries": [
            "US"
        ]
    }
}

RESPONSE

PASS Status code is 200
PASS Status description - OK
subprojectid - subprojectodi595608 (Additional Information, was not in the response body)

5. Retrieve subproject metadata

GET https://{{SEISMICDMS_HOST}}/subproject/tenant/{{data-partition-id}}/subproject/{{subprojectid}}

BODY CURL VERSION

curl --location 'https://subproject/tenant/opendes/subproject/subprojectodi595608' \
--header 'Content-Type: application/json' \
--header 'data-partition-id: opendes' \
--header 'Authorization: Bearer <Token>'

RESPONSE

[seismic-store-service] User not authorized to perform this operation
Status: 403 Forbiden

6. List subproject in a tenant

GET https://{{SEISMICDMS_HOST}}/subproject/tenant/{{data-partition-id}}

BODY CURL VERSION

curl --location 'https://osdu-ship.msft-osdu-test.org/seistore-svc/api/v3/subproject/tenant/opendes' \
--header 'Content-Type: application/json' \
--header 'data-partition-id: opendes' \
--header 'Authorization: Bearer <Token>'

RESPONSE

{
        "name": "subprojectodi595608",
        "tenant": "opendes",
        "ltag": "",
        "acls": {
            "admins": [
                "data.sdms.opendes.subprojectodi595608.admin@opendes.contoso.com"
            ],
            "viewers": [
                "data.sdms.opendes.subprojectodi595608.viewer@opendes.contoso.com"
            ]
        },
        "access_policy": "uniform",
        "enforce_key": true,
        "gcs_bucket": "ss-cloud-kwgbwij7gyjh488"
    }

Regards,

Juliana