Fix: fail with 403 when user not allowed to archive query.

getredash · Jan 25, 2015 · febf993 · febf993
1 parent cddc00e
commit febf993
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/redash/controllers.py b/redash/controllers.py
@@ -349,7 +349,7 @@ def delete(self, query_id):
             if q.user.id == self.current_user.id or self.current_user.has_permission('admin'):
                 q.archive()
             else:
-                self.delete_others_query(query_id)
+                abort(403)
         else:
             abort(404, message="Query not found.")