Wrong authorization when evaluating delete on process step for an app

[knuthalvor]

Description

If the app is set up with policy for delete on a step, Dialogporten and then Arbeidflate does not evaluate the authorization correctly. If a role/subject has a delete on e.g. Utfylling, even though the dialog is in bin, the delete button is not shown. However, if the policy is set on the org-app level the delete button is shown correctly.

Have set up https://altinn.studio/preview/ttd/testdriver-for-arbeidsflate with the following policy:

For Dagl, the delete action shoul apply to the process step "Utfylling", while for Priv (user) the delete action is set on org-app.

Reproduction

Based on the app above, create an app (do not send in), move it to bin and validate the delete button.

Expected behavior

Based on the app above, the expected outcome would be that also for the org the delete button should be shown.

Actual behavior

A short and concise description of what actually happened

Additional information

If there is additional context that is relevant to include.