Editors have unauthorized access to plugin settings

  • herrschuessler

    (@herrschuessler)


    1 year, 4 months ago

    As the title says – we have full access to all plugin settings with an editor account, even though the setting “Manage Solid Security” is explicitly set to “no” for editors.

    We have verified this on multiple WordPress installs.

Viewing 1 replies (of 1 total)
  • Ben Meredith

    (@benmeredithgmailcom)

    1 year, 4 months ago

    Hey @herrschuessler

    First off, apologies for the slow turnaround here.

    Next, I just attempted on a test site to replicate what you’ve reported here, and was not able to. Here’s a video:

    I also had a couple folks from our team attempt to replicate this and none of us are having any luck.

    We’re closed over the weekend, so we might not see a reply until Monday, but as I mentioned in the video, the moment we are able to replicate this, we’re eager to resolve it. At this point, we’re not seeing a way to replicate it.

Viewing 1 replies (of 1 total)

The topic ‘Editors have unauthorized access to plugin settings’ is closed to new replies.