Users able to circumvent “publish pages” capability using cornerstone

  • Resolved gmesmer

    (@gmesmer)


    2 months, 1 week ago

    By using the cornerstone editor, as long as the user has “Edit Pages” capability in WordPress and “Pages” capability in Cornerstone settings they can always change the page publishing status (eg: change the status of a page from “draft” to “publish”) even if they do not have the “Publish Pages” permission in WordPress. This is a breach of the permission management.

    • This topic was modified 2 months, 1 week ago by gmesmer.

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Thread Starter gmesmer

    (@gmesmer)

    Edit: wordpress incorrectly links to this plugin under “View details” even though the report I am making is for a separate plugin from Themeco.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.