Plugin Changes

  • Resolved rsecor

    (@rsecor)


    6 years, 2 months ago

    Something has changed.
    When going to the Plugin, then clicking on my logged-in Google User, I click on Manage Sites…
    This used to only show the site the plugin was active on.
    Now it shows all sites my Google User has access to.

    This is a huge issue as the Google Account I use has access to many different clients. Some of which I would not like to see each other’s website information. Additionally, it could be seen as a security risk.

    Why was this changed?
    Please change this back!

Viewing 6 replies - 1 through 6 (of 6 total)
  • Renee Johnson

    (@reneesoffice)

    6 years, 2 months ago

    @rsecor thanks for your topic. The Manage Sites area has always been present in the plugin. Did you recently add Site Kit to new sites?

    Each additional admin user is required to go through the sign in process with their Google account. They would only see their own custom Manage Sites list.

    Thread Starter rsecor

    (@rsecor)

    6 years, 2 months ago

    I never said that Mange Sites was not there previously.
    I said that previously Manage Sites securely ONLY showed the site you are on.
    NOT all the sites you are connected to with that Google Account.

    Renee Johnson

    (@reneesoffice)

    6 years, 2 months ago

    @rsecor sorry for the misunderstanding. Manage Sites is intended to show all the sites granted access to the Site Kit service with your Google account. It’s an interface provided for you to manage the sites for which you gave permission, so it may show multiple.

    On how many sites did you use Site Kit when it only showed one in Manage Sites?

    I can certainly share your concerns with our team. As mentioned, other admin users cannot see your sites as they are required to sign in with their own Google account.

    Thread Starter rsecor

    (@rsecor)

    6 years, 2 months ago

    Currently using it on at least a dozen sites connected with the same Google Account.

    It sounds like the only concern is if I give access to the WordPress account that linked it up or access to a WordPress account to the plugin itself that would then see it. But that is still an issue.

    Plugin Support James Osborne

    (@jamesosborne)

    6 years, 2 months ago

    @rsecor Correct, sharing your WordPress account access after already setting up Site Kit will allow that user access to the same “Manage sites” feature.

    If you would like to suggest any changes to that feature you can submit a feature request on the plugins GitHub repository.

    Renee Johnson

    (@reneesoffice)

    6 years, 2 months ago

    @rsecor just a quick follow up that we’ve shared your concerns with the team. The current recommendation and best practice is to ensure each user has their own separate WordPress admin account and Google account (with data access on the service platforms like Analytics, etc.) configured so the appropriate access is in place for each user.

    We’re scoping out several requested features for sites with multiple users. Feel free to provide your input on our Github repository for your use case, concerns, and aspects to consider to the issue linked above or as a feature request. Thanks for your feedback!

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Plugin Changes’ is closed to new replies.