The way I have the rights assigned is the following:
Basic group for user access
Global access rights for :
Application navigate
Application view all
Subobjects view all
among with other rights
Department specific groups
OBS unit access rights for:
Application Edit all
subobjects Edit all
So a department member can view all applications and only edit applications within their department. It works fine, only the delete button appears with no rights to delete. Based on the tests that I performed, If a user log in using the basic group for user access only, I don't see the delete button. So I assume it's coming from the Application Edit all right. Technically you are only suppose to see it within your OBS (edit and delete). But this is not the case. I cleared the browser cache and system caches, same results. Any ideas?