Edit posts – wrong user
-
First off… LOVE this plugin. Very helpful.
While doing some testing, I discovered that if I swap out the post_id number for another one that is not mine, it allows me to edit that post. Shouldn’t this be blocked by the Permissions? Here are my “Permission” settings:
Who can see this: only logged in users
Select by Role: Admin, editor, author
Select by Capabilities: none
Select by User: none
Dynamic Permissions: Post AuthorThank you for your feedback and assistance.
The topic ‘Edit posts – wrong user’ is closed to new replies.