Home › Topic › Customize is blocked but still has access

Change WordPress user roles and capabilities › Forums › Bug Reports › Customize is blocked but still has access

Tagged: , , ,

Viewing 6 posts - 1 through 6 (of 6 total)
  • Author
    Posts
  • 02/05/2015 at 01:21 #1485
    MissWebsite
    Participant

    I have blocked access to
    Appearance – Themes
    Appearance – Customize
    Appearance – Widgets

    edit- Dashboard is unchecked (disabled)
    They can view it, that is great.

    The problem is if they go to screen options, they can choose to see the Welcome section. Once this happens, they have access to Customize and a bunch of other options – like change your theme completely, widgets and so on.

    It seems these options should not be allowed if they manually type in the link as well.

    Thank you for looking.
    Carolyn

    02/05/2015 at 23:09 #1487
    MissWebsite
    Participant

    I re-read my post and dont think I was clear. Let me try again.

    If you go to the Dashboard, then choose Screen Options, then click Welcome, you then get access to everything that is denied such as Customize, Widgets, and so on.

    03/05/2015 at 14:58 #1489
    Vladimir
    Keymaster

    Hi Carolyn,

    I confirm this issue. Thanks for letting me know. I will fix it: block that button and check why ‘Customize’ URL was not blocked.

    06/05/2015 at 05:26 #1494
    Vladimir
    Keymaster

    Hi Carolyn,

    The issue with blocking direct access to the customize.php link was fixed with version 4.18.3. Please update and test.

    11/05/2015 at 20:45 #1499
    MissWebsite
    Participant

    Hi Vladmir, I tested several different configurations and they all worked perfect! I even tried the direct links and they did not work. Perfect! Thank you so much! Carolyn

    13/05/2015 at 02:35 #1500
    Vladimir
    Keymaster

    Hi Carolyn,

    Thanks for the feedback.

  • Author
    Posts
Viewing 6 posts - 1 through 6 (of 6 total)
  • You must be logged in to reply to this topic.