Hello, I am running a  Force.com Source Scanner for my AppExchane project and I am still getting this issue even though the logic seems to be correct:

This query looks for Delete operations that are performed without checking for isDeletable(). This may be a false positive if your code accesses only objects whose security is managed by your app and not the admin (for example OAuth states). It may also be a false positive if checks are performed outside of the dataflow (automatically in a visualforce inputfield tag or manually in a constructor), or if this is an enterprise object or other object whose permissions are not set by the admin.

Following code is triggering this issue:
 

SecurityEnforcer.validateCanDelete(listToDelete);
Database.delete(listToDelete, false);

In the SecurityEnforcer class is following logic to check whether the user has delete permission to records that I am trying to delete -> If not an Exception is throwed..

else if(ProcessType.REMOVE.equals(pType) && (!objDescribe.isAccessible() || !objDescribe.isDeletable())) {
                throw new Exception(); //example
            }

What I think is happeing is that the logic is correct but the Source Scanner just doesn't check it correctly and is throwing these not genuine issues...

Has somebody experienced similar issue or can someobody help me to solve it? Thanks in advance :).