Check out the WordPress capabilities to make sure that you are using capabilities that only admins have for the add and edit todo capabilities. Usually “Manage Options” is something that only admins can do so it would be appropriate to use that. “Read” is generally something that all users can do.
Ok, in the user permissions for the plugin I have everything set to “Read”. And then in the User Role Editor (I use that plugin) I see there are 6 task-related items that begin with “Cp” so I deselected all of them for Authors. However, when I login as an author I can still add tasks, as well as select tasks to remove them. I only want editors and admins to add tasks. Is that not possible?
I don’t have any custom capabilities in my plugin, so the ones that start with Cp likely are not related to my plugin. I use the default capabilities added by WordPress. If you are setting everything to Read, then likely every user on your site can view them. You want to use a capability that only editors and admins have, such as Publish Pages. If you look at the link I provided on WordPress capabilities, you can see that all users usually have the Read capability, which is why authors can add tasks.
You want to set Add To-Do Item Capability and Edit To-Do Item Capability to a capability that your authors do not have. By default, Publish Pages is something authors cannot do, unless you changed that using the User Role Editor plugin.
