fix: users who can edit application can now delete the steps & pages

Author: AntoineRelief

src/security/extendAbilityForPage.ts

@@ -84,7 +84,7 @@ export async function extendAbilityForPageOnPage(
   // within the canDelete permissions of the application
   if (ability.cannot('delete', page)) {
     await requireApplication();
-    if (hasApplicationPermission(user, application, 'canDelete')) {
+    if (hasApplicationPermission(user, application, 'canUpdate')) {
       can('delete', 'Page', { _id: page._id });
     }
   }

src/security/extendAbilityForStep.ts

@@ -91,7 +91,7 @@ export async function extendAbilityForStepOnStep(
   // within the canDelete permissions of the application
   if (ability.cannot('delete', step)) {
     const app = await requireApplication();
-    if (hasApplicationPermission(user, app, 'canDelete')) {
+    if (hasApplicationPermission(user, app, 'canUpdate')) {
       can('delete', 'Step', { _id: step._id });
     }
   }