owncloud / owncloud/ocis

Non-admin user tries to delete non-existing result 401

Open
#5,738 4 comments 0 reactions 0 assignees View on GitHub
Topic:Security Type:Bug
Dominant language
Go
Stars
2.1k
Forks
274
Avg merge
2d 1h
Merged PRs (30d)
103

Description

## Describe the bug

Non-admin users try to delete the non-existing users. Then the API request returns a 401 HTTP status code.
```
curl -u user:password DELETE 'https://localhost:9200/graph/v1.0/users/random-uuid' \
```

## Expected behavior
The HTTP status code should be 404. Forbidden rather than 401 Unauthorized

## Actual behavior
Return 401 Unauthorized

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.