Cédric Joyau a écrit : > Hi > > I've got a few questions concerning user rights in the default Nuxeo > application : > - When a user has write permissions (not delete permissions), the delete > button is still active and he can remove documents, is this a bug ?
No, the write permission is a group of permissions that includes the remove children permission. Please have a look at the security spec for details: https://svn.nuxeo.org/nuxeo/org.nuxeo.ecm.core/trunk/nuxeo-core/doc/NXCore-Security.txt > - He can as well delete documents locked by other users. I think this > should be prevented, what do you say ? Probably yes. Please feel free to file a bug on JIRA. -- Olivier _______________________________________________ ECM mailing list [email protected] http://lists.nuxeo.com/mailman/listinfo/ecm
