Permission logical bug

Hello,
first of all thank you for the plugin, it’s really great!

This is a logical problem that maybe is working as aspected but I think it has to be changed.

On the setting page I haven’t selected any role in the section:

“User role who can use plugin”

and, as default, the plugin makes every role able to create popups!!!(subscribers too!).
This is the default behaviour when you enable the plugin and if you don’t be aware of the situation this can be a bad security hole (people can use shortcodes and delete site popups too…).

So please, if this working as aspected, I advise to re-think the behaviuor and make able to create popups just the admin if no role are selected in the settings page.

PS: if I select just one role, for example the “editor” role, the other users became unable to create popups as aspected.

Let me know, thanks.

PPS: 5 star for the plugin ??