Created attachment 544687 [details] Screen shot of logged in user, w/ system having been deleted Description of problem: Logged in as a user with Access only permissions, was able to delete a system.
Created attachment 544689 [details] Permission page showing Access Only on Org.
Created attachment 544691 [details] Permission page showing Access only to environments.
Hmm. Can't seem to reproduce this. Check again and fail it if it still occurs.
Verified this with following katello build: [root@dhcp201-176 ~]# rpm -qa | grep -ie katello-0 -ie pulp-0 katello-0.1.178-1.el6.noarch katello-glue-pulp-0.1.178-1.el6.noarch pulp-0.0.257-1.el6.noarch [root@dhcp201-176 ~]# This defect is not reproducible. I created a user 'test' and assign access only permissions for org and env. However when I tried to remove a system, no such option was available on UI. Please see the attachment in next comment.
Created attachment 555712 [details] with access only permissions, no 'remove system' option is available on UI.