I am trying to set up a calendar in a Space. No matter what restrictions I place on the calendar, anybody with View access can Remove the calendar, even without Edit access. This removes the calendar from the space completely, not just the user's subscription.
Here is a screenshot of the calendar's restrictions:
Here is a screenshot from my test user, who only exists in the x_caltest group (the only permission this group has is View All, no Add or Delete capability):
That option allows me to remove the calendar completely from a test account. I can find no other permissions or restrictions that I can set to prevent somebody with view access from actually removing the calendar from the entire space.
Facts:
- test user exists in 1 group only (x_caltest)
- x_caltest only has the global permission 'can use"
- x_caltest only has the space permission "View All", no Add/Delete
- x_caltest is only a member of the "Can View" restriction on the calendar