Subscribers have edit_posts capability

  • valkyriestudio

    (@valkyriestudio)


    5 years, 5 months ago

    I’m noticing that people with the Subscriber role have edit_posts capabilities, but I know they shouldn’t. Accessing the admin panel as a Sub. account allows me to create posts/pages – not publish them, but it’s still more access than I should have.

    If I disable edit_posts within User Role Editor and save it, the next time I refresh the page, Subscribers have that capability again.

    Any ideas why this is automatically turning back on?

Viewing 1 replies (of 1 total)
  • Plugin Author Vladimir Garagulya

    (@shinephp)

    5 years, 5 months ago

    I suppose that some plugin changes these WordPress default permissions for subscriber. Try to deactivate all plugins except URE, revoke edit posts capabilities from subscriber role and make new test. Then activate plugins back one by one to isolate which one adds capabilities which you do not wish.

Viewing 1 replies (of 1 total)

The topic ‘Subscribers have edit_posts capability’ is closed to new replies.