Designing WordPress REST API permissions with AI
TL;DR There are four cells in the test matrix every custom WordPress REST API route should survive: anonymous, subscriber, editor, administrator. Most plugins skip the matrix entirely. The plugin author tests with the admin account and ships with one of…