[Koha-bugs] [Bug 36066] REST API: We should only allow deleting cancelled order lines

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36066

--- Comment #15 from Marcel de Rooy <m.de.rooy at rijksmuseum.nl> ---
(In reply to Victor Grousset/tuxayo from comment #10)
> Another thing that made it slip unnoticed is the return code being the same
> for not having the right permission and trying to delete something not in
> the right state for deletion.

Yeah we also use 409 in the REST API. Mostly when trying to add a duplicate. In
this case I have my doubts if we should go there now. I am just reading it like
You are not authorized to delete a non-cancelled order line.

-- 
You are receiving this mail because:
You are watching all bug changes.