Security profiles Allow delete for Assigned To only

Hi,

The security profile is setup that the "assigned to" can view, edit and delete record but do not have access territory.

This security is called on a custom ASP page in the Button definition.

The security does not work as expected. I need to give access to the territory delete. But we do not want that as the user need to see the territory data.

Anyone has come around this issue? We are on 7.2 H.

Thank you,

Stephane