fix(api): Skip issue mutations without project access (#123108)

If an org doesn't have open team membership on (or generally has no
projects), `get_projects` will return an empty list, and error when we
try to reference projects inside of it. We should just return 204 in
those situations instead.

Fixes SENTRY-5P2G

Author: cvxluo

src/sentry/issues/endpoints/organization_group_index.py

@@ -522,8 +522,12 @@ def get(
         examples=IssueExamples.ORGANIZATION_GROUP_INDEX_PUT,
     )
     @track_slo_response("workflow")
-    def put(self, request: Request, organization: Organization) -> Response[MutateIssueResponse]:
+    def put(
+        self, request: Request, organization: Organization
+    ) -> Response[MutateIssueResponse] | Response[None]:
         projects = self.get_projects(request, organization)
+        if not projects:
+            return Response(status=204)
 
         search_fn = functools.partial(
             self._search,
@@ -568,6 +572,8 @@ def delete(
         self, request: Request, organization: Organization
     ) -> Response[None] | Response[DetailResponse] | Response[ValidationErrorResponse]:
         projects = self.get_projects(request, organization)
+        if not projects:
+            return Response(status=204)
 
         search_fn = functools.partial(
             self._search,

tests/sentry/issues/endpoints/test_organization_group_index.py

@@ -3225,6 +3225,17 @@ def get_response(self, *args: Any, **kwargs: Any) -> Response:
     def assertNoResolution(self, group: Group) -> None:
         assert not GroupResolution.objects.filter(group=group).exists()
 
+    def test_no_accessible_projects(self) -> None:
+        organization = self.create_organization()
+        self.create_project(organization=organization)
+        user = self.create_user()
+        self.create_member(organization=organization, user=user, has_global_access=False)
+        self.login_as(user=user)
+
+        response = self.get_response(organization.slug, status="resolved")
+
+        assert response.status_code == 204
+
     def test_global_resolve(self) -> None:
         group1 = self.create_group(status=GroupStatus.RESOLVED)
         group2 = self.create_group(status=GroupStatus.UNRESOLVED)
@@ -4654,6 +4665,17 @@ def assert_deleted_groups(self, groups: Sequence[Group]) -> None:
             assert not Group.objects.filter(id=group.id).exists()
             assert not GroupHash.objects.filter(group_id=group.id).exists()
 
+    def test_no_accessible_projects(self) -> None:
+        organization = self.create_organization()
+        self.create_project(organization=organization)
+        user = self.create_user()
+        self.create_member(organization=organization, user=user, has_global_access=False)
+        self.login_as(user=user)
+
+        response = self.get_response(organization.slug)
+
+        assert response.status_code == 204
+
     @patch("sentry.eventstream.snuba.SnubaEventStream._send")
     @patch("sentry.eventstream.snuba.datetime")
     def test_delete_by_id(self, mock_datetime: MagicMock, mock_send: MagicMock) -> None: