Source/Collection DELETE head exports not allowed

OpenConceptLab · Feb 4, 2021 · 3bbc13f · 3bbc13f
1 parent 1f37237
commit 3bbc13f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/core/common/mixins.py b/core/common/mixins.py
@@ -538,6 +538,9 @@ def delete(self, request, *args, **kwargs):  # pylint: disable=unused-argument
         user = request.user
         version = self.get_object()
 
+        if version.is_head:
+            return Response(status=status.HTTP_405_METHOD_NOT_ALLOWED)
+
         permitted = user.is_staff or user.is_superuser or user.is_admin_for(version)
 
         if not permitted: