Non-Admin user Can Delete BPI sub-group

[gregbeyer]

Hi, why is it that a non-admin user, to whom I have not given user permission to a BPI or BPI subgroup can edit or delete a sub-element, including critical elements of a BPI? The top level BPI has no pencil / X symbol. But sub-elements do. Masquerating as the user, I clicked the "X" to delete. I was asked for confirmation, and warned that this action was not reversible. Of course, I stopped, not wanting to hose up by BPI.

[jsimon]

Hi Greg,

I'm unfortunately struggling to replicate this issue. Can you provide some additional details?

-What is the state of the "Show All Groups To All Users" setting (BPI -> Settings Tab)
-What permissions does this user have?
-What are the "priority" and "auth_user" values for the hostgroups in question (BPI -> Config Management -> Edit Config)