I think it's time to improve the capabiltiies control for this plugin. Let's keep it pretty simple for now - just regsiter custom capabilities and map meta capabilties as one might expect:
Administrator - access to everything
Editor - everything except Settings
Author - can publish and manage their own posts
Contributor - can write and manage their own posts but not publish
https://developer.wordpress.org/plugins/users/roles-and-capabilities/
http://justintadlock.com/archives/2010/07/10/meta-capabilities-for-custom-post-types
I think it's time to improve the capabiltiies control for this plugin. Let's keep it pretty simple for now - just regsiter custom capabilities and map meta capabilties as one might expect:
Administrator - access to everything
Editor - everything except Settings
Author - can publish and manage their own posts
Contributor - can write and manage their own posts but not publish
https://developer.wordpress.org/plugins/users/roles-and-capabilities/
http://justintadlock.com/archives/2010/07/10/meta-capabilities-for-custom-post-types