Hello,
I’ve explicitly denied the right to delete a page on multiple levels (global user rights, global group rights, page user rights, page group rights) but the user is still able to delete the page.
It seems like the right settings are outright ignored…
Check http://extensions.xwiki.org/xwiki/bin/view/Extension/Security+Module#HDefaultrightsbeingpredefined . There is a “Creator” right
Internal right provided to document creators
that implies delete right. So the creator of a page automatically gets the right to delete that page. I don’t know if you can deny delete to creators.
to cheat then
Pascal
Thanks @mflorea for the link and thanks @Pbas for pointing out these “cheats”