We have a WordPress site where we have external authors for whom we have created usernames at the
Editor level. We want these editors to be able to create new posts and modify their own posts, but occasionally we have posts in progress that we'd rather keep more private.
It is a very small pool of users, and an even smaller number of posts to "protect," so I am okay with any technique that requires explicit GRANT for our own users or explicit DENY for the external users. DENY would be easier of course, but I am not going to get fussy.