wordpress.org plugin review

Authenticated ≠ authorized: a guest gets 401, a logged-in Editor gets 403 rest_forbidden. Three wp.org reviews of our plugins, three questions: ① Who may call the route? 4WP…