User can still see and access CMS features even without the correct permission
CMS
•
ID: 1046263
Backlog
Published on6/7/2024
•
Last updated on6/7/2024
1 min read
Summary
If the user doesn't have any of the CMS permissions the user shouldn't be able to access or even see the CMS modules. But it is not happening.
Simulation
Try accessing the CMS modules using a user that doesn't have the following LM permissions:
CMS:
- See CMS menu on the top-bar
- Settings
GraphQL:
- CMS GraphQL API
The user will still be able to access and see the resources (but not edit).
Workaround
N/A