Edit_post reveals EVERYONE’S posts

  • Resolved wwwilson

    (@wwwilson)


    8 years, 6 months ago

    With a custom post type, after adding capabilities, every time I add edit_post_type to a role the users in this role can see ALL custom posts assigned to everyone. This should just be user-generated posts.

    I have disabled edit_others and delete_others but still the same problem.

    What could be causing this and how can I prevent this from happening?

    Thanks in advance,

    Andrew

Viewing 2 replies - 1 through 2 (of 2 total)
  • johndg

    (@johndg)

    8 years, 6 months ago

    I’ve got similar problem with comments. Apparently, when you grant access to “Edit posts” you can also view and edit user comments in WordPress despite having also “Manage comments” on “Deny”.

    Or in another words “Manage comments” rule does not apply.

    Justin Tadlock

    (@greenshady)

    8 years, 6 months ago

    To the original question, you’d need a custom plugin written to handle that feature. WP doesn’t have a built-in capability for handling the “listing” of others’ posts. It’s not hard to do. Feel free to shoot me an email if you’d like to talk about a custom project.

    @johndg – The moderate comments issue has been known about for 8 years in WP. Maybe you can push them to fix it. 🙂 https://core.trac.ww.wp.xz.cn/ticket/12104

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Edit_post reveals EVERYONE’S posts’ is closed to new replies.