Plugin settings page should not be tied to edit_plugins capability

pixelgrade / customify

Intuitive Website Styling integrated into WordPress' Customizer

GNU General Public License v2.0

28 stars 5 forks source link

Plugin settings page should not be tied to edit_plugins capability #165

Closed vladolaru closed 5 years ago

vladolaru commented 5 years ago

Right now, only users with the edit_plugins capability can see and access the Settings > Customify plugin settings page. This is quite wrong since that capability can be turned off (for everyone) due to security considerations.

It is best to tie the admin page to something like manage_options.