Unauthorized access
-
hi
Why all users have access to the settings of this plugin
Only the admin should have access to the plugin settings
There are no settings for this
-
Hi @kasra6499,
The plugin allows users with edit_published_posts capability to access WPP’s settings page as people with this kind of permission are usually trusted users.
Also, since this has been asked before not too long ago, please let me to quote myself here:
Aside from allowing authors to change a few design related settings (like thumbnail-related options, for example), authors cannot do much more than that.
So, unless you grant access to your site to people you don’t trust (which isn’t a good idea in the first place) then them accessing WPP’s settings page shouldn’t be an issue – unless there’s something I’m missing? If so please do share your thoughts, maybe you have another perspective that I haven’t considered yet.
The topic ‘Unauthorized access’ is closed to new replies.
