Support » Plugin: WP Project Manager - Project, Task Management & Team Collaboration Software » Users are accessible across all blogs on multisite network

  • Resolved rojokuze

    (@rojokuze)


    In the “add user” menu while creating projects, this plugin searches through all users in the entire multi site network, how do I prevent this?

    It’s a huge security issue.

    • This topic was modified 6 months ago by  rojokuze.
    • This topic was modified 6 months ago by  rojokuze.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Md. Yeasin

    (@mdmamun-1)

    Hi @rojokuze,

    We apologize for this unexpected inconvenience.

    Actually, the plugin is not 100% compatible with the multisite network.

    In the โ€œadd userโ€ menu while creating projects, the WP Project Manager plugin searches user and show the name only to select and assign to the project.

    By default, we are unable to prevent this. So, it would be very helpful if you describe how it invades the security that we can fix it in the core plugin and release a new version in the near future.

    Thank you ๐Ÿ™‚

    rojokuze

    (@rojokuze)

    A user on one multisite subsite can search for names and add them to their own project management dashboard.

    This would allow the subsite user to send email notifications to the users.

    Plugin Support Md. Yeasin

    (@mdmamun-1)

    Hi @rojokuze,

    Yes, you are right by default assigned user must be notified by mail for their project, task, discussion and mentioned comment.

    If you want then you ignore users (from another subsite) to assign in a project.

    By default, when a user registers on one of your sites, they are registered for all sites within your Multisite. The WP Multisite User Sync plugin allows you to easily sync or un-sync a user or multiple users from one site to another.

    Thank you ๐Ÿ™‚

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Users are accessible across all blogs on multisite network’ is closed to new replies.