Author Topic: Integrated Media Stats in PowerPress displayed to all users  (Read 2097 times)

Zachary DuBois

  • Newbie
  • *
  • Posts: 39
  • Owner and Founder of AccountProductions
    • AccountProductions
Integrated Media Stats in PowerPress displayed to all users
« on: November 09, 2012, 06:10:12 pm »
Hi,
I think this is a major security flaw if a subscriber level user goes to example.com/wp-admin/ they can view the media stats on your podcast. Please fix or make options for it.
- Thanks

angelo

  • Custom Title
  • Administrator
  • Hero Member
  • *****
  • Posts: 3984
  • CIO, RawVoice
    • Angelo's Blog
Re: Integrated Media Stats in PowerPress displayed to all users
« Reply #1 on: November 12, 2012, 09:29:07 am »
What capabilities do your subscribers have?

Zachary DuBois

  • Newbie
  • *
  • Posts: 39
  • Owner and Founder of AccountProductions
    • AccountProductions
Re: Integrated Media Stats in PowerPress displayed to all users
« Reply #2 on: November 12, 2012, 09:57:00 am »
Lets say you were to register and you became a subscriber. If you were to go to /wp-admin/ on your site they can see the blubrry podcast statistics widget on the dashboard on the admin page. Most of my plugins you cannot access any widgets from the dashboard.

angelo

  • Custom Title
  • Administrator
  • Hero Member
  • *****
  • Posts: 3984
  • CIO, RawVoice
    • Angelo's Blog
Re: Integrated Media Stats in PowerPress displayed to all users
« Reply #3 on: November 12, 2012, 10:24:44 am »
Correct.

What I'm asking though is did you add/remove any capabilities to the subscriber role?

By the way, go to powerpress > tools page, you can turn on roles and capabilities, that may fix the issue.

Zachary DuBois

  • Newbie
  • *
  • Posts: 39
  • Owner and Founder of AccountProductions
    • AccountProductions
Re: Integrated Media Stats in PowerPress displayed to all users
« Reply #4 on: November 12, 2012, 10:33:57 am »
Adding in that did seem to work. I read the description on it and it said it is not recommend. What are the downsides to this feature?