Restrict plugin to users without "Publish" permissions

[sergejpapper]

Hello,

I do not know, if it is a bug or feature request. Or maybe you already have this feature and I just need to configure it.

Let say, I have a role, which can create item, but can not publish it. In this case Strapi returns me an error, when I press Publish button. But I still can to enter publish or unpublish date and plugin will publish item on a specific time (tested).

I think, it is security issue. Maybe it possible to add ability to disable plugin in the role configuration.

Please inform me if you need more information.

[boazpoolman]

Great suggestion! I agree this is a security issue and therefore can be considered a bug.

[rcdk]

Awsome catch @sergejpapper ! :-) - I look forward to this beeing fixed - And great job with the plugin @boazpoolman - I hope you know how much your hard work is appriciated and valued