I don’t know. When I’m doing it the same way it works fine… :-/
You have to lock the media file itself. it’s the same way to lock a page or an article. this is due to uam logic that either an article, a page or a media file is locked to a defined role but no included stereotypes.
Anyway notice my issue https://ww.wp.xz.cn/support/topic/not-api-safe/ for your pages and sites!
I found out, that the Plugin in my Instance Works at Site and also on Media Access by browsing through the Website. But via the WordPress api Site-content as Plain Text, can be accessed anyway and the Plugin doesnt Block anything.
-
This reply was modified 6 years, 7 months ago by Daniel Walz.