You have a user with read and write access rights on a content page. The user requests the page and the page is displayed with all the authoring functionalities on it (edit bars, and so on).
You also have a user who has only read access to the same content page. However, this user can see the edit bars and the other authoring functionalities on the page. When the same user requests, the page with a question mark at the end of the url the edit bars disappear.
Although the read only user can see the edit bars, they cannot edit or delete any content.