Author: kudu
Description:
When you set up a custom protection level that isn't available to users that don't have special user groups apart from admins, admins can still delete those pages.
For example, if you create a "restricted" protection level and give the right to edit those pages to the "restricted" user group, admins (probably because they have the protect and delete rights) who aren't in the "restricted" group won't be able to edit pages that are protected at the "restricted" level, but they'll be able to delete them.
Version: unspecified
Severity: enhancement