Project

General

Profile

Actions

Defect #35827

closed

Deleting a closed or archived project returns 403

Added by Holger Just over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Category:
Projects
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Affected version:

Description

Following #33945, it turned out that the patch removes the ability to delete closed or archived projects (even for administrators). The behavior is here:

  • deleting an archived project (as admin) - HTTP 403: The project you're trying to access has been archived.
  • deleting a closed project - HTTP 403 - You are not authorized to access this page.

The attached patch fixes this. With this patch, closed projects can be deleted by normal users (if they have the project permission) or administrators. Archived projects can be deleted by admins only. The behavior for active projects is unchanged.

I'm setting the target version to 4.2.3 since this is a regression since Redmine 4.2.0.


Files

Actions

Also available in: Atom PDF