DELETE /restServices/archivaServices/repositoriesService/project/internal/com.test/test

DELETE /restServices/archivaServices/repositoriesService/project/internal/com.test/test%2f..%2f..%2f..%2f..%2f..%2fdata

@Path ("project/{repositoryId}/{groupId}/{projectId}")
@DELETE
@Produces ({ MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML, MediaType.TEXT_PLAIN })
@RedbackAuthorization (noPermission = true)
Boolean deleteProject( @PathParam ("groupId") String groupId, @PathParam ("projectId") String projectId,
                       @PathParam ("repositoryId") String repositoryId )
    throws ArchivaRestServiceException;

public Boolean deleteProject( String groupId, String projectId, String repositoryId )
    throws ArchivaRestServiceException
{
...
    if ( !isAuthorizedToDeleteArtifacts( repositoryId ) )
    {
        throw new ArchivaRestServiceException( "not authorized to delete artifacts", 403, null );
    }

...
    try
    {
        ManagedRepositoryContent repository = repositoryFactory.getManagedRepositoryContent( repositoryId );

        repository.deleteProject( groupId, projectId );
    }
...
}

<servlet-mapping>
  <servlet-name>RepositoryServlet</servlet-name>
  <url-pattern>/repository/*</url-pattern>
</servlet-mapping>

protected void service( HttpServletRequest request, HttpServletResponse response )
    throws ServletException, IOException
{
    WebdavRequest webdavRequest = new WebdavRequestImpl( request, getLocatorFactory() );
    // DeltaV requires 'Cache-Control' header for all methods except 'VERSION-CONTROL' and 'REPORT'.
    int methodCode = DavMethods.getMethodCode( request.getMethod() );
    boolean noCache = DavMethods.isDeltaVMethod( webdavRequest ) && !( DavMethods.DAV_VERSION_CONTROL == methodCode
        || DavMethods.DAV_REPORT == methodCode );
    WebdavResponse webdavResponse = new WebdavResponseImpl( response, noCache );
    DavResource resource = null;

    try
    {
        // make sure there is a authenticated user
        if ( !getDavSessionProvider().attachSession( webdavRequest ) )
        {
            return;
        }

        // check matching if=header for lock-token relevant operations
        resource =
            getResourceFactory().createResource( webdavRequest.getRequestLocator(), webdavRequest, webdavResponse );

        if ( !isPreconditionValid( webdavRequest, resource ) )
        {
            webdavResponse.sendError( DavServletResponse.SC_PRECONDITION_FAILED );
            return;
        }
        if ( !execute( webdavRequest, webdavResponse, methodCode, resource ) )
        {
            super.service( request, response );
        }

    }
...
}