"Content author" can publish content in a CMS Workspace

Possible Cause

This issue occurs because CMS Workspace contributor roles are inherited through the Salesforce organization's role hierarchy.

Assume a user assigned the "Content author" role is higher in the organization's role hierarchy. If a user with stronger permissions (e.g., "Content admin" or "Content manager") exists in a role below them in the hierarchy, the user in the higher role will inherit the access permissions of the lower role, allowing them to publish content.

Resolution

To avoid this issue, please ensure that contributors with stronger access permissions than higher roles are not placed in lower roles within the organization's role hierarchy.