Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.
according to the screenshot it seems that we may perform assertion before the delete rest route has finished its job