Author can "delete" any article file from the do_revision view

[mauromsl]

Describe the bug
From the do_revision view, authors can delete previously uploaded files. The files themselves are not deleted, but rather unlinked from the article object.
There are no permissions checked against the file before it gets "deleted" so the author could tweak the posted file_id and potentially "delete" any file in the article

Janeway version
v1.3.8

To Reproduce
Steps to reproduce the behavior:

1. Get an article to the review stage and request revisions for it
2. As an author, access the revision request
3. Tweak the file_id to any file id link to the article which the author shouldn't have access to (e.g. a review file)
4. File gets "deleted"

Expected behavior
There should be form validation, in this view, ensuring the author can only "delete" their own files
Bonus points: Rename file.delete_file to something that actually describes the function behaviour.

Screenshots
If applicable, add screenshots to help explain your problem.

[StephDriver]

Reviewing this as I was about to implement it, I wonder what the use-case is for an author to be able to delete (even when meaning to disassociate) a file from the article.

1. if they have uploaded an incorrect file, then they will want to actually delete it, not leave it somewhere in the system unassociated with this article. This functionality does not currently exist, and this issue doesn't suggest it be added.

2. therefore, if the file is not incorrect, but a part of the history, why would the author need to disassociate it? Surely it should stay associated with the article, unless an editor wishes otherwise?

Could the original issue be resolved by simply removing the delete button from the author's view of the page, so that they can't disassociate any of the files?

[ajrbyers]

I think the main issue here is that they can do it to any file, not just the ones they have access to.

[StephDriver]

But should they be able to disassociate any file in the first place?

What reason would they have to be able to do that to any file?

[ajrbyers]

The most obvious example to me would be if a figure file had been removed from the MS they'd want to remove the record in Janeway.

[ajrbyers]

Note from pair session: The draft PR (#4366) appears to be working. To test it:

Create a revision request
Attempt to delete a non-presented file
Also check that presented files can still be deleted and downloaded as this was also changed