I’m using EE 2.5.2 and have a bloggers member group that should only be able to update their own posts and should only be able to add posts using their author name.
For the bloggers member group, I have ‘Can change the author name when posting channel entries’ set to no.
When I login as a blogger and go to publish an entry, I see all author names in the author dropdown. If I select another author than the logged in user and click submit, the publish screen just reloads. There is no error to say you do not have permission to choose that author, just a silent failure.
Is this how things are supposed to work? I was expecting either no other names to be available in the author dropdown, or failing that, for an error to be shown on submitting with a different author name.
Also, if a blogger goes to edit an existing entry, they can change the author dropdown to any author and save the entry. I realise the permission set is for posting channel entries, but should it not apply to updating entries also? As it stands, there is nothing to stop a blogger just changing the author post publish to any author they like.
Have not needed to enforce entry authoring permissions before, so I would appreciate some feedback on whether the behaviour I’m seeing is to be expected or there is something awry.
Thanks for your time