Replies: 0
Hi Kevin et al,
I am running several sites on a WordPress multisite, was running the latest WP 5.9 and latest PublishPress Permission 3.7, one of my users reported that they could see a lot of content they felt they shouldn’t be able to see (and indeed has not previously seen).
It looks like my access control on various sites has pretty much disintegrated, users can see posts in categories that they should be completely blocked from, and can see pages they should be completely blocked from. And I suspect they were completely blocked from this content until “recently” (I notice a few PPP updates in recent times, and I can’t be any more specific about when the problems began).
Initially, I was checking settings on categories, sub-categories, and even then on a few individual posts in an attempt to hide stuff, it was kinda working, but then I appreciated the scale of the reveal. Some of the settings seemed puzzling to me (lots of “default yes” that I wouldn’t expect, but I hadn’t looked at some of my category settings for a long time). I don’t know if somehow the settings had changed, or if some recent plugin update has just caused a wider failure of the access control concept?
I’ve reverted the plugin to 3.6.5 (simply on the grounds another user reported some different issues after this version) and this seems to have reset things to good access control. I’ve no idea what’s going on.
Help?
Kind regards
YikYak