API fail?

[aleene]

It seems I can use the api to delete all info AND images. No idea what happened.

https://world.openfoodfacts.org/product/9120007367249/burgenland-2015-heinrich?rev=17

Anyway, this should not be possible by regular api users.

[stephanegigandet]

Very strange, any idea of what the the API query looked like?

[aleene]

I hoped you could find it in the logs.

[aleene]

It happened again: https://fr.openfoodfacts.org/produit/20068066/pate-feuilletee-toque-du-chef?rev=26

1 août 2018 à 12:22:37 CEST - aleene Images téléchargées (Suppression : 3, 1, 5, 6, 2, 4) -- Images sélectionnées (Suppression : front_fr, ingredients_fr, nutrition_fr) -- Données (Changement : lang, countries) (Suppression : product_name, generic_name, quantity, packaging, brands, categories, labels, expiration_date, purchase_places, stores, ingredients_text, traces, nutrition_data_per) -- Nutriments (Suppression : energy, fat, saturated-fat, carbohydrates, sugars, proteins, salt, sodium, nutrition-score-fr, nutrition-score-uk) - Creating product (image upload) - voir

Note that this the image upload api. Somehow it interpretes an image upload, as a product delete and/or creation.