SharePoint 2007 Document Library has permissions set for user A to "Read". User A is able to go to Actions -> Open in Windows Explorer and delete files. This seems like a very large security loop hole.
We do not want to remove the Open in Windows Explorer option so is there any way to enforce permissions in this setting?