Skip to content
Public Ticket #24949

Penci Frontend Submission overrules WordPress roles

Conversation thread

PenciDesign Supporter replied

Staff Reply

Hi,

For this case, please send me your WordPress admin account in a PRIVATE reply.
I'll log in and try to help you check this problem.

Regards,
PenciDesign.



DP started the conversation

Conversation Start

I created a role on WordPress which has the right to create posts but can't edit published posts. Backend submission is working fine, but Frontend submission allows users without the granted "edit_published_posts" right to edit published posts. That's a problem, because users can change published posts without any approval, and it's a huge security risk too. Please add an option to the plugin to prevent users from editing published posts. Alternatively, the status of the post should be changed to unpublished if edited by users after they are already published.

Want to join this conversation or access attachments? Sign in first.