Merge pull request #361 from EverythingMe/DAT-825

Fix: fail with 403 when user not allowed to archive query.
getredash · Jan 25, 2015 · d941e5e · d941e5e
2 parents 039b0a8 + febf993
commit d941e5e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/redash/controllers.py b/redash/controllers.py
@@ -349,7 +349,7 @@ def delete(self, query_id):
             if q.user.id == self.current_user.id or self.current_user.has_permission('admin'):
                 q.archive()
             else:
-                self.delete_others_query(query_id)
+                abort(403)
         else:
             abort(404, message="Query not found.")