• Logged in as student A
• In a course blog
• Looking at a post made by A

• Delete links appear next to all comments.

This is incorrect. On a course blog, students can only delete their own comments. They are not allowed to delete comments made by other students, even in response to their own post.

The system correctly enforces this (you get an error if you try) but the links should not be displayed.

Correct logic (already in place for checking permission when you try to delete) is that you can delete if and only if one of the following is true:

• You have managecomments permission on the context
• It is your own personal blog
• You made the comment