On a site of a client I have a group of people. They should be able to edit a Module (News Posts) in the Backend. But nothing else.
Problem is: when they click on "My Profile" (the link in the footer) and the popup appears it has the content of the complete backend.
I solved this by assigning the Site Content Permission and added to my Page.php the canCreate, canEdit and so on handlers to prevent them from doing anything "stupid". Then and only then they are able to edit their own profile.
Is this a bug? Is there a better way?
I'm using SS 2.4.9.
Any hint or help is appreaciated :)