I create custom post types in the plugin called 'More Fields'.
I have 5 different post types created.
Like: Products, Cats, Dogs, Jobs, Pinguins.
I have 2 user roles.
Userrole 1 can post Products, Cats and Dogs.
The other user role can post Jobs and Pinguins.
When you post a new pinguin you see this in your URL
When I am userrole 1 and I replace Pinguins to Products (Which only user role 2 should be able to post) I can post these posts too?
So theres no restriction on that. Only the UI gets removed but not the access to it if you change your URL.
How can this be fixed?
Thanks in advance.