[daisy] menu entry "Page Actions - Delete" is shown even if the user has no right to delete document

Andreas Deininger adeininger at googlemail.com
Fri Nov 10 03:49:16 CST 2006


Hi,

I'm performing a ACL-evaluation for my live ACL which tells me:

ACL Evaluation Result
Result of ACL evaluation for:

    * User: 157
    * Role: 120
    * Document id: 3907-MACE
    * Branch id: 1
    * Language id: 2

Permission	Action	Object reason or matching expression	Subject reason
readLive	grant	id = '3907-MACE' and branch = 'main'	user is 157
read	grant	id = '3907-MACE' and branch = 'main'	user is 157
write	grant	id = '3907-MACE' and branch = 'main'	user is 157
publish	deny	id = '3907-MACE' and branch = 'main'	user is 157
delete	deny	id = '3907-MACE' and branch = 'main'	user is 157

Even though the user 157 does not have the right to delete the
document with id 3907, the menu entry "Page Actions - Delete" is shown
if that user calls that document. If he actually clicks that
"delete"-link, only the option to retire that document is offered. I
wonder why in that case the "delete" option is presented at all. Is
that the intended behaviour?

Regards
Andreas


More information about the daisy mailing list