It’s possible to access and fill softdeleted forms via ODK Collect Intents Tester app

[dbemke]

ODK Collect version

v2023.3.1, the store version, the master version ee9b02a

Android version

10

Device used

Redmi 9t

Problem description

It’s possible to access and fill softdeleted forms via ODK Collect Intents Tester app. In the steps below there’s an example of recovering a savepoint of a form which was deleted from the list of new forms (but had a saved draft).

Steps to reproduce the problem

1. Add one project with at least one form.
2. Create a draft of the form.
3. Create a savepoint in the form in Start new form.
4. Delete the form.
5. Go to ODK Collect Intents Tester app and tap "Fetch blank forms with content provider”.
6. Open the deleted form and recover the savepoint.

Expected behavior

Softdeleted forms shouldn’t allow starting new forms or recovering savepoints of deleted forms.