Skip to main content

delete_session_core

Function delete_session_core 

Source
pub async fn delete_session_core(
    state: &AppState,
    rc: &RequestContext,
    object_id: &str,
) -> Result<Value, ParseError>
Expand description

DELETE /sessions/:objectId, which is narrower than an ordinary class delete.

rest.del reads the row first for _Session and then re-checks the owner explicitly (rest.js:181-197), because _Session rows carry no ACL and the ordinary write constraint therefore excludes nothing. A miss is Object not found for delete., which is that path’s message rather than the class router’s Object not found.