Project

General

Profile

Actions
Copy link

Defect #35827

closed

Deleting a closed or archived project returns 403

Added by Holger Just about 3 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Marius BĂLTEANU
Category:
Projects
Target version:
4.2.3
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Affected version:

Description

Following #33945, it turned out that the patch removes the ability to delete closed or archived projects (even for administrators). The behavior is here:

  • deleting an archived project (as admin) - HTTP 403: The project you're trying to access has been archived.
  • deleting a closed project - HTTP 403 - You are not authorized to access this page.

The attached patch fixes this. With this patch, closed projects can be deleted by normal users (if they have the project permission) or administrators. Archived projects can be deleted by admins only. The behavior for active projects is unchanged.

I'm setting the target version to 4.2.3 since this is a regression since Redmine 4.2.0.

Files

0001-Allow-to-delete-closed-and-archived-projects.patch (3.91 KB) 0001-Allow-to-delete-closed-and-archived-projects.patch Holger Just, 2021-08-30 18:52
Actions
Copy link
 #1

Updated by Marius BĂLTEANU about 3 years ago

  • Category set to Projects
  • Status changed from New to Resolved
  • Assignee set to Marius BĂLTEANU

Patch committed, thank you.

Actions
Copy link
 #2

Updated by Marius BĂLTEANU about 3 years ago

  • Status changed from Resolved to Closed
Actions
Copy link
 #3

Updated by Marius BĂLTEANU about 3 years ago

  • Tracker changed from Patch to Defect
  • Subject changed from Allow to delete closed and archived projects to Deleting a closed or archived project returns 403
Actions
Copy link

Also available in: Atom PDF