Module allows anonymous users to delete pages

Thanx you for your report. I Will look into it monday.

This patch removes the "allowed" return value. Now we only return forbidden if the node should not be removed, otherwise we return neutral so in fact we don't change anything except when the permission should be revoked.

Could you please test if this patch is sufficient?

@JoshaHubbers, Thanks for all the efforts. I tested your patch using simplytest.me. The patch works fine without 'delete homepage node' permission for anonymous user but when the anonymous user is given 'delete homepage node' permission, then it is not allowed to delete the page. PFA. Please look into it and do the needful. Correct me if I'm wrong.

Thank you for your comment @krina.addweb. But I cannot think of a situation in which I would give an anonimous user the permission to delete a homepage? The Drupal permission system works that if a permission is denied, this overrules all allowed permissions. So if the anonimous user does not have the "delete page" permission, the "delete frontpage" permission will obviously not work. I think this is how it is supposed to work...

@JoshaHubbers I have tested locally and the patch appears to have solved this issue.