Any user type can view site stats if they connect to wordpress.com

  • Resolved androweb

    (@androweb)


    11 years, 5 months ago

    Site stats restrictions for users works fine within your self hosted wordpress dashboard, but if a user connects jetpack to their own wordpress.com account they can see the full site stats from their wordpress.com dashboard regardless of the jetpack site stats configuration set by the administrator.

    The administrator can go into their own wordpress.com account and remove access from other users, but that doesn’t stop the users from re-connecting and viewing site stats all over again.

    http://wordpress.org/extend/plugins/jetpack/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Jeremy Herve

    (@jeherve)

    Jetpack Mechanic 🚀

    11 years, 5 months ago

    Thanks for the report! I have forwarded the issue to our developers, and we will work on a fix as soon as possible.

    I will keep you posted!

    Plugin Author Jeremy Herve

    (@jeherve)

    Jetpack Mechanic 🚀

    11 years, 2 months ago

    We have now fixed the issue. The fix will be available in the next Jetpack release.

    Thread Starter androweb

    (@androweb)

    11 years, 1 month ago

    Thanks Jeremy, just tested 2.2, once a subscriber connects to wordpress.com via Jetpack, if that same subscriber then logs onto wordpress.com they are disallowed access to stats 🙂

    Also I noticed that there are a couple of new messages in Jetpack config on wordpress.com when you are logged in on the primary/administrator account:

    One says that access control will be available from your self-hosted dashboard after the next update.

    The other message only displays when a user connects to wordpress.com via the self hosted Jetpack, the administrator now sees a note above the user access list stating that subscribers can access stats, which I guess was intended as a temporary warning, but is no longer necessary because subscribers are blocked if not promoted by the administrator.

    Plugin Author Jeremy Herve

    (@jeherve)

    Jetpack Mechanic 🚀

    11 years, 1 month ago

    You’re right, we need to update the text there. Thanks for the warning!

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Any user type can view site stats if they connect to wordpress.com’ is closed to new replies.