Not currently operational. Once the caller is authorized, this endpoint attempts
a soft-delete that the application cannot perform: the purchase order does not support
discarding (there is no discarded_at column and no discard behaviour on the model),
so the delete raises server-side and returns 500 Internal Server Error. There is
no soft-delete or restore capability for purchase orders. Do not rely on this endpoint
until it is fixed.
Authorization
- Authorization is checked first (Pundit); an unauthorized caller gets a 401 with an
empty body before the 500 path is reached.
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
Unauthorized — invalid/missing authentication token, or the caller is not
authorized to delete this purchase order (Pundit policy). The response body
is empty (Pundit renders nothing); branch on the status code, not the body.
Internal Server Error — the delete path is broken (see summary). An authorized
delete request reaches this state today because purchase orders cannot be discarded.