If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.
I have created the module "Albatross" with two data sets in your demo. Emma is assigned. The role (support + suppprtmanager) is set to delete no. Nevertheless, Emma can delete the record she created.
Is this your intention?
If any of the records he himself has can delete regardless of the role, we have a security issue.
Comment