Vulnerability in EPiServer.Forms
Is it possible to restrict user permissions for the Manage Expiration and Archiving functionality in Optimizely CMS 12?
Not 100% sure on this, but I would expect that a user with the role 'CmsEditors' wouldn't be able to do this. You can then create a role 'CmsApprovers' or somethig similar to allow some users to publish content, but not be administirators'
Thanks Andy - it actually looks like "Manage Expiration and Archiving" is part of Publish access right so you need to remove publish permissions.