{"action":"closed","issue":{"url":"https://api.github.com/repos/linnovate/mean/issues/1430","labels_url":"https://api.github.com/repos/linnovate/mean/issues/1430/labels{/name}","comments_url":"https://api.github.com/repos/linnovate/mean/issues/1430/comments","events_url":"https://api.github.com/repos/linnovate/mean/issues/1430/events","html_url":"https://github.com/linnovate/mean/issues/1430","id":123898140,"number":1430,"title":"User can delete content without having permissions","user":{"login":"amirmog","id":1817627,"avatar_url":"https://avatars.githubusercontent.com/u/1817627?v=3","gravatar_id":"","url":"https://api.github.com/users/amirmog","html_url":"https://github.com/amirmog","followers_url":"https://api.github.com/users/amirmog/followers","following_url":"https://api.github.com/users/amirmog/following{/other_user}","gists_url":"https://api.github.com/users/amirmog/gists{/gist_id}","starred_url":"https://api.github.com/users/amirmog/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/amirmog/subscriptions","organizations_url":"https://api.github.com/users/amirmog/orgs","repos_url":"https://api.github.com/users/amirmog/repos","events_url":"https://api.github.com/users/amirmog/events{/privacy}","received_events_url":"https://api.github.com/users/amirmog/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/linnovate/mean/labels/bug","name":"bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":{"login":"VikramTiwari","id":1330677,"avatar_url":"https://avatars.githubusercontent.com/u/1330677?v=3","gravatar_id":"","url":"https://api.github.com/users/VikramTiwari","html_url":"https://github.com/VikramTiwari","followers_url":"https://api.github.com/users/VikramTiwari/followers","following_url":"https://api.github.com/users/VikramTiwari/following{/other_user}","gists_url":"https://api.github.com/users/VikramTiwari/gists{/gist_id}","starred_url":"https://api.github.com/users/VikramTiwari/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/VikramTiwari/subscriptions","organizations_url":"https://api.github.com/users/VikramTiwari/orgs","repos_url":"https://api.github.com/users/VikramTiwari/repos","events_url":"https://api.github.com/users/VikramTiwari/events{/privacy}","received_events_url":"https://api.github.com/users/VikramTiwari/received_events","type":"User","site_admin":false},"milestone":null,"comments":1,"created_at":"2015-12-25T21:28:34Z","updated_at":"2015-12-27T04:22:55Z","closed_at":"2015-12-27T04:22:55Z","body":"In the 'Articles' example package:\r\n\r\nAn authenticated user with 'can create content' role (authenticated;can create content;) added from the /admin/user screen, can create content which is an expected behaviour. The user can not edit content which is also an expected behaviour but then can delete content even though 'can delete content' has not been added to the roles.\r\n\r\nAny ideas ?\r\nThanks."}}