This Bug Report affects these Traffic Control components:

• Traffic Ops

Current behavior:

Currently the DNS-SEC:READ and DNS-SEC:DELETE permissions are not seeded in the db. As a result non admin users will never have the permissions to query GET/DELETE: cdns/name/{name}/dnsseckeys

Expected behavior:

Those permissions should be created and appropriately assigned to the correct existing roles.

Steps to reproduce:

Create a user whose role has the following role_capabiltity: CDN:READ, DELIVERY-SERVICE:READ, DELIVERY-SERVICE:UPDATE, CDN:UPDATE and see that the user is not able to query the dnsseckeys endpoints.