[daisy] menu entry "Page Actions - Delete" is shown even if the
user has no right to delete document
Andreas Deininger
adeininger at googlemail.com
Fri Nov 10 03:49:16 CST 2006
Hi,
I'm performing a ACL-evaluation for my live ACL which tells me:
ACL Evaluation Result
Result of ACL evaluation for:
* User: 157
* Role: 120
* Document id: 3907-MACE
* Branch id: 1
* Language id: 2
Permission Action Object reason or matching expression Subject reason
readLive grant id = '3907-MACE' and branch = 'main' user is 157
read grant id = '3907-MACE' and branch = 'main' user is 157
write grant id = '3907-MACE' and branch = 'main' user is 157
publish deny id = '3907-MACE' and branch = 'main' user is 157
delete deny id = '3907-MACE' and branch = 'main' user is 157
Even though the user 157 does not have the right to delete the
document with id 3907, the menu entry "Page Actions - Delete" is shown
if that user calls that document. If he actually clicks that
"delete"-link, only the option to retire that document is offered. I
wonder why in that case the "delete" option is presented at all. Is
that the intended behaviour?
Regards
Andreas
More information about the daisy
mailing list