[daisy] menu entry "Page Actions - Delete" is shown even if the user has no right to delete document

[Bruno Dumon]

On Fri, 2006-11-10 at 10:49 +0100, Andreas Deininger wrote:
> Hi,
> 
> I'm performing a ACL-evaluation for my live ACL which tells me:
> 
> ACL Evaluation Result
> Result of ACL evaluation for:
> 
>     * User: 157
>     * Role: 120
>     * Document id: 3907-MACE
>     * Branch id: 1
>     * Language id: 2
> 
> Permission	Action	Object reason or matching expression	Subject reason
> readLive	grant	id = '3907-MACE' and branch = 'main'	user is 157
> read	grant	id = '3907-MACE' and branch = 'main'	user is 157
> write	grant	id = '3907-MACE' and branch = 'main'	user is 157
> publish	deny	id = '3907-MACE' and branch = 'main'	user is 157
> delete	deny	id = '3907-MACE' and branch = 'main'	user is 157
> 
> Even though the user 157 does not have the right to delete the
> document with id 3907, the menu entry "Page Actions - Delete" is shown
> if that user calls that document. If he actually clicks that
> "delete"-link, only the option to retire that document is offered. I
> wonder why in that case the "delete" option is presented at all. Is
> that the intended behaviour?

Yes, since otherwise the retire functionality would not be accessible?

-- 
Bruno Dumon                             http://outerthought.org/
Outerthought - Open Source, Java & XML Competence Support Center
bruno at outerthought.org                          bruno at apache.org