iTSec (Pro) is violating #11 of the Detailed Plugin Guidelines

  • Resolved dwinden

    (@dwinden)


    7 years, 8 months ago

    @gerroald

    I think the iThemes Security (Pro) plugin is violating #11 of the Detailed Plugin Guidelines in the WordPress Plugin Developer Handbook.

    So what’s this all about ?

    The See what’s new and Get Free API Key admin notices are displayed on ALL Dashboard pages.

    Yes, I know they are both dismissable which is a good thing. But there is no point in displaying these notices on ALL pages. It would make sense to only display them in the Plugins page and the iTSec plugin pages.

    On top of that the 2 notices are also displayed to ALL roles.

    The 2 notices are completely irrelevant for Subscribers, Contributors, Authors and Editors since they don’t even have access to the iTSec plugin Security menu option.
    Clicking on the Get Free API Key button, while logged in as a user with one of these roles, will also display the following msg:

    You do not have sufficient permissions to access this page.

    Notices can be very usefull but they can also irritate users and hijack the Dashboard interface. Since these 2 notices are displayed on ALL Dashboard pages to ALL roles I believe they are hijacking the Dashboard.

    Please have the developers fix this ASAP.

    dwinden

    https://wordpress.org/plugins/better-wp-security/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter dwinden

    (@dwinden)

    7 years, 8 months ago

    @gerroald

    This issue(s) has been fixed in the iTSec Pro 2.8.0 or higher release.

    I’ll close this topic after confirmation the next iTSec plugin version includes the fix(es).

    dwinden

    Thread Starter dwinden

    (@dwinden)

    7 years, 8 months ago

    @gerroald

    Fixed in the iTSec 5.6.1 release. According to the 5.6.1 changelog:

    Bug Fix: Prevented some notices from displaying to users who do not need to see them.
    Bug Fix: Limited notices to only display on specific pages on the dashboard.

    dwinden

    Gerroald

    (@gerroald)

    7 years, 8 months ago

    Hey Dwinden,

    Thanks for the notice on this. As you note, we have addressed these issues in 5.6.1.

    Thanks,

    Gerroald

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘iTSec (Pro) is violating #11 of the Detailed Plugin Guidelines’ is closed to new replies.