I not too long ago observed a brand new function within the Gutenberg editor (I am guessing launched in WordPress 5.8) that seemingly permits any consumer to publish as another consumer:
I confirmed that utilizing this new choice, a consumer belonging to the Writer function was in a position to efficiently to publish as a consumer belonging to the Admin function. Why on Earth was this function launched with seemingly no permissions checks, and may or not it’s disabled?