I didn't see another report on this matter, so hopefully, it isn't a duplicate.
ISSUE
When a player has been granted control of a token, they are able to copy that token and paste a copy of it onto the map. The player cannot delete or modify the token's data. They can only create copies of it. The copy retains all markers, values, and permissions.
METHOD
From my testing, the only way that this works is for the player to select the token and use the Control+C shortcut. After that, if they hit Control+V, a new copy of the token will be pasted onto the map.
CONFIGURATION
I have witnessed this behavior on:
-- Windows7 (64) using Google Chrome (v18), Firefox (11), Internet Explorer (9+Google Frame)
-- MacOS 10.7 using Google Chrome, Firefox.