I have a user who occasionally reports "missing" documents. Review of the audit trail shows a destroy action under the user's name, but she consistently denies deleting the document. Since she is the owner, she has delete permissions.
Does anyone have any ideas on how to track what's going on? In the audit log the string_1 value is blank for the dm_destroy event (where as it is "Save" for the dm_save events) and the event_description is "Default Event Set".
Thanks.