Project

General

Profile

Actions
Copy link

Defect #35827

closed

Deleting a closed or archived project returns 403

Added by Holger Just about 3 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Marius BĂLTEANU
Category:
Projects
Target version:
4.2.3
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Affected version:

Description

Following #33945, it turned out that the patch removes the ability to delete closed or archived projects (even for administrators). The behavior is here:

  • deleting an archived project (as admin) - HTTP 403: The project you're trying to access has been archived.
  • deleting a closed project - HTTP 403 - You are not authorized to access this page.

The attached patch fixes this. With this patch, closed projects can be deleted by normal users (if they have the project permission) or administrators. Archived projects can be deleted by admins only. The behavior for active projects is unchanged.

I'm setting the target version to 4.2.3 since this is a regression since Redmine 4.2.0.

Files

0001-Allow-to-delete-closed-and-archived-projects.patch (3.91 KB) 0001-Allow-to-delete-closed-and-archived-projects.patch Holger Just, 2021-08-30 18:52
Actions
Copy link

Also available in: Atom PDF