search

analogwp / analogwp-templates

Style Kits for Elementor adds a number of intuitive styling controls in the Elementor editor that allow you to apply styles globally or per page.
https://analogwp.com
27 stars 7 forks source link

Multisite rollback executed for non authorized users action #425

Closed gvgvgvijayan closed 3 years ago

gvgvgvijayan commented 4 years ago

(The Style kits pro on a multisite.) It seems administrators of the child sites are able to roll back the version and that affects the entire setup of all sites. It said you do not have permission after processing the request and rolling it back. So the permission check was there it just didn't seem to trigger in time. Is it possible to disable that menu for rollback

Related to: https://github.com/analogwp/style-kits-pro/issues/93

gvgvgvijayan commented 4 years ago

Can reproduce the issue, here is the screenshot: issue_425_rollback

Things to do:

  1. Remove rollback setting in Style Kits settings page for unauthorized logged-in users
  2. When unauthorized users accesses the URL directly display the error message Sorry, you are not allowed to update plugins for this site. without doing any action like plugin rollback