src/Tree/Controllers/TreeController.cs

-using Coscine.WaterbutlerHelper;
+using Coscine.WaterbutlerHelper;
 using Coscine.WaterbutlerHelper.ReturnObjects;
 using Coscine.ApiCommons;
 using Coscine.ApiCommons.Factories;
@@ -94,6 +94,10 @@ namespace Coscine.Api.Tree.Controllers
 
             var user = _authenticator.GetUser();
             var check = CheckResourceIdAndPath(resourceId, path, out Resource resource);
+            if (check != null)
+            {
+                return check;
+            }
 
             if (resource.ApplicationProfile[^1] != '/')
             {
@@ -102,12 +106,7 @@ namespace Coscine.Api.Tree.Controllers
 
             if (user == null || !_resourceModel.HasAccess(user, resource, UserRoles.Owner, UserRoles.Member))
             {
-                return Forbid("User has no Access to this resource.");
-            }
-
-            if (check != null)
-            {
-                return check;
+                return BadRequest("User has no Access to this resource.");
             }
                         
             try
@@ -223,7 +222,12 @@ namespace Coscine.Api.Tree.Controllers
 
             if (user == null || !_resourceModel.HasAccess(user, resource, UserRoles.Owner, UserRoles.Member))
             {
-                return Forbid("User is no project member!");
+                return BadRequest("User is no project member!");
+            }
+
+            if (resource.Archived == "1")
+            {
+                return BadRequest("The resource is readonly!");
             }
 
             if (resource.ApplicationProfile[^1] != '/')

src/Tree/Tree.csproj

@@ -5,7 +5,7 @@
 		<AssemblyName>Coscine.Api.Tree</AssemblyName>
 		<GenerateDocumentationFile>true</GenerateDocumentationFile>
 		<TargetFramework>net5.0</TargetFramework>
-		<Version>2.2.2</Version>
+		<Version>2.3.0</Version>
 	</PropertyGroup>
 	<PropertyGroup>
 		<Authors>RWTH Aachen University</Authors>