I think there’s a flaw in the user level permissions.
A user that’s set to level 1 can edit every post which has a comment to it and that belongs to a user of the same level. He just has to go in the “Comment” section in the Admin panel and sees “Edit Post” for every post!
I don’t think this is correct, a level-1 user can’t be allowed to edit other posts and in fact Manage->Posts page hides correctly every post that’s not owned by him.
- The topic ‘User permissions bug (1.3-alpha4)’ is closed to new replies.