Delete operation is forbidden for current area

[Moinashraf]

I am trying all above possibilities to resolve this issue but the error shown in the frontend and In admin The address data should not display.

[orlangur]

It looks like you are trying to delete something on frontend while it is only allowed in admin.

Please describe issue using template so that it can be reproduced on default Magento 2 installation.

[Moinashraf]

Hello @orlangur,
When we are enable address field in customer_account_create.xml file using
<referenceBlock name="customer_form_register"> <arguments> <argument name="show_address_fields" xsi:type="string">1</argument> </arguments> </referenceBlock>
And when we want to register the user on My Account.It will display Above
Delete operation is forbidden for current area.

[allamsettiramesh]

I am also facing same issue, Can please provide solution for this issue

[veloraven]

@Moinashraf if you want to report an issue please format this issue according to the Issue reporting guidelines: with steps to reproduce, actual result and expected result.
Please, also identify which version of Magento you are running.
If you are looking for some advice or discussion please refer to the Community Forums or the Magento Stack Exchange site as GitHub issue tracker is intended for technical issues only.

[magento-engcom-team]

@Moinashraf we are closing this issue due to inactivity. If you'd like to update it, please reopen the issue.

[ndlinh]

This problem can be reproduced by using a proxy to modify input value (eg: burp suite) that make the address validation failed. Technically, the method AccountManagement.createAccountWithPasswordHash(...) has code like this:

try {
    foreach ($customerAddresses as $address) {
        if ($address->getId()) {
            $newAddress = clone $address;
            $newAddress->setId(null);
            $newAddress->setCustomerId($customer->getId());
            $this->addressRepository->save($newAddress);
        } else {
            $address->setCustomerId($customer->getId());
            $this->addressRepository->save($address);
        }
    }
    $this->customerRegistry->remove($customer->getId());
} catch (InputException $e) {
    $this->customerRepository->delete($customer);
    throw $e;
}

I has a plugin on AbstractAddress.validate() to add custom validation on address base on my customer requirements. When the validation return errors InputException will be throw then $this->customerRepository->delete($customer); is called. This will cause error Delete operation is forbidden for current area . Even through getting that error, customer account was created but address was not.

The workaround for this problem is avoid to add custom validation to AbstractAddress.validate() but I think it will better if we wrap the saving process of customer & address in to a transaction with commit & rollback.

[ihor-sviziev]

Re-opening since we got answer