User(s) without Delete rights are shown Delete option on content info page (Doc ID 2376389.1)

Last updated on FEBRUARY 13, 2024

Applies to:

Symptoms

User(s) without Delete rights are shown delete option on content info page although they cannot execute the delete action.

Issue can be replicated at will:
1. Create a user in WLS and give no group membership to this user.

2. As an admin check-in a content item with Security Group as Public.

3. Logged in as a user from step# 1 and navigate to content info page, it shows the delete option. When clicked on delete, user gets following error message.

Content Server Request Failed
Error Unable to delete revision for '<Content ID>'. User '<UserName>' does not have sufficient privileges.

Actual Result: Even though users without delete rights are unable to execute delete action, they are not supposed to see the delete option on content info page.

Expected Result: Only users with appropriate rights are to be shown the delete option on content info page. Any User without Delete rights should not have the delete option even if they cannot execute the action.

Excerpt from trace logs:

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.