Articles about security, privacy, data protection and access control
Site Health helps Site Owners verify whether Jyavani Core and extension files still match trusted baselines while reviewing the safety of media and site-owned files. Its result is a diagnostic snapshot from the latest scan, not antivirus p…
Plugin permission contracts were introduced in 2.3.73 and tightened in 2.3.74. Plugins declare their permissions in plugin.json; Core validates then synchronizes it to dynamic authorization. Namespace and route guard Keys must be lowercase…
Core separates images in the Media Library and general documents in the File Library. Both support public/private storage and access scopes, but the URLs and shortcodes are different. Access contract public: an asset is only public if v…
Recycle Bin Core applies to articles, pages, theme content, categories, and users who own them is_deleted/deleted_at. Media and File Libraries do not use the same soft delete contract. Trash, restore, purge The initial delete marks the rec…
Core provides dynamic access control, CSRF, session fingerprinting, path guard, brute-force tracking, private storage, and packet validation. This feature is a layer, not a guarantee of deployment security. Authentication and dashboard The…
Jyavani Core 2.3.74 uses dynamic roles and permissions. The old role fields remain synchronized for compatibility, but new access decisions must use effective permissions and scope. SiteOwner Site Owner is a special account attribute, not …
