Users can delete related records via the calendar module when they don't have permission

Users are able to delete opportunities, invoices, projects, and project tasks records via the calendar even when their profile is configured so that they cannot delete them. I have replicated this bug in your demo.

To replicate this bug-:

1. Configure a profile so that 'Delete' is unchecked for Opportunities.
2. Configure a user to use that profile
3. Login as that user.
4. Create an opportunity.
5. Go to the Calendar module. Hover cursor over the opportunity entry.
6. Click the trash icon
7. The opportunity record is then deleted when this should NOT be possible!

Note, it is likely they can delete any related record via the calendar module, but I haven't test this to confirm