Merge pull request #361 from EverythingMe/DAT-825

Fix: fail with 403 when user not allowed to archive query.

Author: arikfr

redash/controllers.py

@@ -349,7 +349,7 @@ def delete(self, query_id):
             if q.user.id == self.current_user.id or self.current_user.has_permission('admin'):
                 q.archive()
             else:
-                self.delete_others_query(query_id)
+                abort(403)
         else:
             abort(404, message="Query not found.")