{"action":"opened","issue":{"url":"https://api.github.com/repos/uzerpllp/migration-testing/issues/67","labels_url":"https://api.github.com/repos/uzerpllp/migration-testing/issues/67/labels{/name}","comments_url":"https://api.github.com/repos/uzerpllp/migration-testing/issues/67/comments","events_url":"https://api.github.com/repos/uzerpllp/migration-testing/issues/67/events","html_url":"https://github.com/uzerpllp/migration-testing/issues/67","id":119180947,"number":67,"title":"Sales order line edit action allows cancel and delete on picked lines","user":{"login":"steveblamey","id":297376,"avatar_url":"https://avatars.githubusercontent.com/u/297376?v=3","gravatar_id":"","url":"https://api.github.com/users/steveblamey","html_url":"https://github.com/steveblamey","followers_url":"https://api.github.com/users/steveblamey/followers","following_url":"https://api.github.com/users/steveblamey/following{/other_user}","gists_url":"https://api.github.com/users/steveblamey/gists{/gist_id}","starred_url":"https://api.github.com/users/steveblamey/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/steveblamey/subscriptions","organizations_url":"https://api.github.com/users/steveblamey/orgs","repos_url":"https://api.github.com/users/steveblamey/repos","events_url":"https://api.github.com/users/steveblamey/events{/privacy}","received_events_url":"https://api.github.com/users/steveblamey/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/uzerpllp/migration-testing/labels/Orders","name":"Orders","color":"ededed"}],"state":"open","locked":false,"assignee":{"login":"steveblamey","id":297376,"avatar_url":"https://avatars.githubusercontent.com/u/297376?v=3","gravatar_id":"","url":"https://api.github.com/users/steveblamey","html_url":"https://github.com/steveblamey","followers_url":"https://api.github.com/users/steveblamey/followers","following_url":"https://api.github.com/users/steveblamey/following{/other_user}","gists_url":"https://api.github.com/users/steveblamey/gists{/gist_id}","starred_url":"https://api.github.com/users/steveblamey/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/steveblamey/subscriptions","organizations_url":"https://api.github.com/users/steveblamey/orgs","repos_url":"https://api.github.com/users/steveblamey/repos","events_url":"https://api.github.com/users/steveblamey/events{/privacy}","received_events_url":"https://api.github.com/users/steveblamey/received_events","type":"User","site_admin":false},"milestone":null,"comments":0,"created_at":"2015-11-27T11:29:28Z","updated_at":"2015-11-27T11:29:28Z","closed_at":null,"body":"The edit action on the sorderlines controller doesn't check the line status for the edit action. This means that it is possible to delete/cancel/change a sales order line by using a line's edit url in the browser. The UI will only show an edit link if the line has an appropriate status.\r\n\r\nUnder some combination of user actions, the UI may allow a picked line to be deleted, leaving the picked items in the stock location. It should only be possible to delete a line that has been explicitly unpicked."}}