Integrated Media Stats in PowerPress displayed to all users

[Zachary DuBois]

Hi,
I think this is a major security flaw if a subscriber level user goes to example.com/wp-admin/ they can view the media stats on your podcast. Please fix or make options for it.
- Thanks

[angelo]

What capabilities do your subscribers have?

[Zachary DuBois]

Lets say you were to register and you became a subscriber. If you were to go to /wp-admin/ on your site they can see the blubrry podcast statistics widget on the dashboard on the admin page. Most of my plugins you cannot access any widgets from the dashboard.

[angelo]

Correct.

What I'm asking though is did you add/remove any capabilities to the subscriber role?

By the way, go to powerpress > tools page, you can turn on roles and capabilities, that may fix the issue.

[Zachary DuBois]

Adding in that did seem to work. I read the description on it and it said it is not recommend. What are the downsides to this feature?