Issue

• Read-only user has access to deploy/delete content

• I have a JON read-only user with "measure" access only, but when I login as the read-only user, I can browse to the JBoss Application Server (AS) resource, and actually delete deployed content

• I am able to select a JAR from the content page of a JBoss Application Server (AS) resource and click on delete even though the user does not have the delete permission in their role
• Should I see any check boxes to delete content if I give the user's role read-only access?
• When a user's role does not contain the delete permission, they are still able to check deployed components and see the delete button