From febf9939c8573564738c8792621e155fdadf0c6c Mon Sep 17 00:00:00 2001 From: Arik Fraimovich Date: Sun, 25 Jan 2015 17:30:10 +0200 Subject: [PATCH] Fix: fail with 403 when user not allowed to archive query. --- redash/controllers.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/redash/controllers.py b/redash/controllers.py index 8d6d088e02..629991f786 100644 --- a/redash/controllers.py +++ b/redash/controllers.py @@ -349,7 +349,7 @@ def delete(self, query_id): if q.user.id == self.current_user.id or self.current_user.has_permission('admin'): q.archive() else: - self.delete_others_query(query_id) + abort(403) else: abort(404, message="Query not found.")