By default I allowed members to upload files to the media library. They can also browse the media library (when editing their posts). Now does this result in any security risk?
What i’m referring to is flush_rewrite_rules() which is, according to various sources, should be added if you experience 404 pages with custom post types.