Changes to the Job board permissions
The job board is being spammed again.
Currently people can spam the job board by:
- Creating an account
- Validating an email
- Then post using the "job" content type.
The patterns appear to be human. We already have a few measures in place to block them.
So I did the following changes:
- Removed the permission to create Job posts to regular authenticated users (it's the only permission they had)
- Added the permission to create Job posts to the "blog and extensions" role.
I'm also thinking of adding a help message on the user/dashboard page so that people know how they can request the permission.
cc @josh