Disabling the Delete Own permission still allows the users to delete their own content

Summary

• The Delete Own space permission is meant to give you permission to delete any pages, blogs, attachments and comments you've created in this space (regardless of whether other users have subsequently edited the content), according to our documentation (Space Permissions Overview). This means that in case this permission is disabled, it shouldn't allow a user to delete the own user's content created, however, even though this permission is disabled, we are still able to delete our own comments/pages/etc.

Steps to Reproduce

1. Create a user who is a member of the confluence-users group only (user doesn't have administration permissions)
2. In a specific space, go to Space Tools >> Permissions >> Edit Permissions
   1. Remove all group permissions, by deselecting all the permissions applied to each group
   2. Add the user individually and grant this user the following permissions:
      • All - View
      • Pages - Add
      • Blog - Add
      • Attachments - Add
      • Comments - Add
   3. Save the changes made
   4. Have this user comment on a page and refresh the page

Expected Results

• The user is able to add a comment, but cannot delete it.

Actual Results

• The user adds a comment and not only the Delete option is available, but is also functional, allowing the user to delete his own content (even though the Delete Own permission is disabled).

Workaround

N/A