Fix permissions for soft delete

Following endpoints only check for data viewer access currently:

  • POST /api/storage/v2/records/{id}:delete (soft delete API)
  • POST /api/storage/v2/records/delete (bulk delete API)

I updated soft delete API and now only users with owner access can do the soft delete

issue: #138 (closed)

Edited by Yauheni Lesnikau

Merge request reports

Loading