User(s) without Delete rights are shown delete option on content info page
(Doc ID 2376389.1)
Last updated on MARCH 20, 2018
Applies to:Oracle WebCenter Content - Version 184.108.40.206.0 and later
Information in this document applies to any platform.
User(s) without Delete rights are shown delete option on content info page although they cannot execute the delete action.
Issue can be replicated at will:
1. Create a user in WLS and give no group membership to this user.
2. As an admin check-in a content item with Security Group as Public.
3. Logged in as a user from step# 1 and navigate to content info page, it shows the delete option. When clicked on delete, user gets following error message.
Content Server Request Failed
Error Unable to delete revision for '<Content ID>'. User '<UserName>' does not have sufficient privileges.
Actual Result: Even though users without delete rights are unable to execute delete action, they are not supposed to see the delete option on content info page.
Expected Result: Only users with appropriate rights are to be shown the delete option on content info page. Any User without Delete rights should not have the delete option even if they cannot execute the action.
Excerpt from trace logs:
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!