0.16.01 min read
Security Model
Understand permissions, nonces, source immutability, and provider boundaries.
mcLogiora treats translation relationships as sensitive site data. Relation records can point at drafts, private posts, scheduled posts, terms, media, menus, and widgets, so authenticated REST reads are capability-gated.
Security rules
- Admin write actions use WordPress capability checks and nonces.
- REST relation and translation routes require the documented translation capability.
- Public language reads expose only the active public projection by default.
- Read functions do not grant permission to display an object.
- Diagnostics redact keys and provider internals.
- Suggestion requests happen only after explicit user actions.
- Provider credentials are never exposed through the public PHP API or REST projections.
Operational posture
Use least privilege, HTTPS, regular backups, reviewed plugin updates, and a staging test for URL or default-language changes. Keep import/export packages private and maintain a rollback path before applying a plan.
Related articles
Privacy & External ServicesDocument the optional provider data path, storage model, and no-telemetry boundary.mcLogiora REST APIUse the authenticated language, relation, and translation route families.System Status & Site HealthRead redacted environment diagnostics and native WordPress Site Health checks.