Issue Summary

When attempting to deactivate or delete Data Security Policies, the following error is occurring.

We're unable to deactivate the policy
We're not sure what went wrong. Try again.

The error occurred because the data security policy was applied to a sandbox in the past, which was later deleted. We can observe the error below in the browser Developer Tools.

Path: https://admin.atlassian.com/gateway/api/admin/v1/orgs/********/policies/********

Response: 

{
    "timestamp": "2024-08-26T11:06:08.706+00:00",
    "path": "/api/admin/v1/orgs/********/policies/*************",
    "status": 400,
    "error": "Bad Request",
    "requestId": "*******-********",
    "errors": [
        {
            "id": "*************",
            "status": "400",
            "code": "ERROR_*********",
            "title": "Products don't belong to site",
            "detail": "Product [confluence] does not belong to any site owned by Organization [**************]"
        }
    ]
}

Steps to Reproduce

1. Create a Data Security Policy.
2. Set up the policy to be enforced on both a production site and a sandbox site.
3. Remove the sandbox site where the policy has been enforced.
4. Try to deactivate or deleted the data security policy.

Expected Results

• It is expected the data security policy to be deactivated or deleted.

Actual Results

The following error is occurring.

We're unable to deactivate the policy
We're not sure what went wrong. Try again. 

Workaround

As a workaround, the request triggered by clicking on the deactivate or delete buttons can be modified to exclude the deleted sandbox information from the request body. Once the modification is made, the request can be resent.