Contributors can see all media and permanently delete it

  • Resolved Dekadinious

    (@dekadinious)


    4 years, 6 months ago

    When logging in as a contributor user, I can not see the media menu item in the admin backend. This is expected.

    When creating a new post as a contributor user, I can see all blocks in Gutenberg. Ok, a little strange I think, but I can restrict that no problem.

    Now, when adding an image to a post, the media library opens. A contributor can now see all media uploaded to WordPress and permanently delete it.

    1. Is this expected behavior?
    2. I have added some code to make only the users own media visible if they are a contributor, and that works. How can I block the deletion of media for these users?

    I thought WordPress out of the box was very strict about what contributors are allowed to do, but Gutenberg seems to break that functionality?

Viewing 4 replies - 1 through 4 (of 4 total)
Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Contributors can see all media and permanently delete it’ is closed to new replies.