Deletion for all sites exposed to users without permission

[zsavajji]

Hi,
i'm building a multi-country / multi-language Craft website, and i found out a bug happening in the deletion of entries.

I have an "admin" role which can add / edit / delete entries for all countries and languages, and some "regional" editors which can only edit a subset of this localized entries.
After some testing i found that the localized editor user can also delete entries of other sites, excluded from its permissions.

The delete button of the editor account should only be a "Delete for site" action, but the account has also access to the regular delete button.

I'm on latest Craft PRO 3.7.16, MySQL / php8

Thanks!

[brandonkelly]

The permission is for the main “Delete” action, which is a global operation, so this is working as expected.

We could consider adding a permission specifically for the “Delete for site” action, for sites where the Propagation Method is set to “Let each entry choose which sites it should be saved to”.

[zsavajji]

No, it's not, I think i explained myself badly.
If i give a user the permission to edit some sites only, this user should only see the "delete for site" button, since it should not apply global operations.
My restricted user can, with this set of permissions, also delete entries for the US/IT websites, using the global "Delete" button, which it should not have access to.

Let me know if i missed something :)

[brandonkelly]

I understand you don’t want users without access to all sites to be able to delete entries globally. I’m saying that you are misunderstanding the permission though. “Delete entries” really does mean “Delete entries globally”. So the permission is working as intended. Your issue would be solved if we were to introduce a new (lesser) permission for only deleting entries for a specific site.

[zsavajji]

Oh, ok! Now i get it 😄!
Yes, that would solve the issue, and would also be reasonable for a true multi site ownership, since every single site editor would have complete control over its own entries.

Thank you