diff --git a/api/auth/containerauth.py b/api/auth/containerauth.py index 6e665dd384fd1cc1e85739d61bcbe35563654dc6..ef0abab0684a4aa77ca84827c1425539394b361b 100644 --- a/api/auth/containerauth.py +++ b/api/auth/containerauth.py @@ -4,7 +4,6 @@ Purpose of this module is to define all the permissions checker decorators for t from . import _get_access, INTEGER_PERMISSIONS from ..web.errors import APIPermissionException -from .. import config def default_container(handler, container=None, target_parent_container=None): @@ -39,7 +38,6 @@ def default_container(handler, container=None, target_parent_container=None): if not has_access and container.get('has_original_data', False) and user_perms == INTEGER_PERMISSIONS['rw']: # The user was not granted access because the container had original data - errors = {'reason': 'original_data_present'} else: errors = {'reason': 'permission_denied'} diff --git a/tests/integration_tests/python/test_containers.py b/tests/integration_tests/python/test_containers.py index e0134a9cb9075d8ef79b82824b47ebab174995ab..07352d7a186f4e28541d786b7e545ca3066052c0 100644 --- a/tests/integration_tests/python/test_containers.py +++ b/tests/integration_tests/python/test_containers.py @@ -1269,7 +1269,7 @@ def test_container_delete_tag(data_builder, default_payload, as_root, as_admin, # try to delete acquisition referenced by analysis r = as_admin.delete('/acquisitions/' + acquisition) - assert r.status_code == 400 + assert r.status_code == 403 # try to delete acquisition file referenced by analysis r = as_admin.delete('/acquisitions/' + acquisition + '/files/test.csv')