Delete paste by using the password

[christianmerges]

At the moment deleting a paste is not possible without saving the cookie from creating. It would be great to just delete it in the frontend and via apicall just by providing the password.

[matze]

So you want to conflate decryption with further access control?

[christianmerges]

Not really. When it is possible to view the cobtent by providing url and password, it should also be possible for the backend to delete that entry from the database.

[matze]

Yes, so much is clear. But the point is: just because I have the password now (perhaps shared by a colleague) why would that give me the right to also be able to delete it?

[christianmerges]

Because the creator of the paste chose to. Sonetimes it is needed to open the paste on another device again, so the feature "burn after view" is not helping. I have a bunch of pasts now, where i do not have saved the cooke, which i wanna delete now. We could also make these deletions with an "admin apikey".

[matze]

Because the creator of the paste cose to

Would be great, if you had phrased it like that in the initial request :-)

[christianmerges]

I try to improve every day :)