[Koha-bugs] [Bug 36066] REST API: We should only allow deleting cancelled order lines

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36066 --- Comment #15 from Marcel de Rooy <m.de.rooy@rijksmuseum.nl> --- (In reply to Victor Grousset/tuxayo from comment #10)

Another thing that made it slip unnoticed is the return code being the same for not having the right permission and trying to delete something not in the right state for deletion.

Yeah we also use 409 in the REST API. Mostly when trying to add a duplicate. In this case I have my doubts if we should go there now. I am just reading it like You are not authorized to delete a non-cancelled order line. -- You are receiving this mail because: You are watching all bug changes.