At https://github.com/nuxeo/nuxeo-ui-elements/blob/maintenance-2.4.x/actions/nuxeo-delete-document-button.html#L117 we can see that the code test the Write permission instead of Remove.
It means that if one defines a permission which contains Write but not remove, as described at https://doc.nuxeo.com/nxdoc/how-to-grant-the-edit-permission-without-the-remove-permission/, the Delete button will be displayed for people with this permission whereas it should not.
- is duplicated by
-
NXP-24737 Fix Trash button should not appear if no Remove permission
- Resolved
- Is referenced in