In my setup, every user starts with the ‘Staff’ role so I can globally control some permissions.
Each user then has one or more ‘Functional’ roles that specify what content types they can access (events, forms, pages, posts, etc…).
Finally, each user has one or more ‘Department’ roles that specify all the IDs and taxonomies they can potentially access (in conjunction with the Functional roles they have).
The issue I’m having is that a user may have access to specific pages and posts, but is unable to have unrestricted access to all content of a specified custom post type. Instead, they can’t see any of the CPT content.
Using the ‘ure_restrict_edit_post_type‘ code, fixes the issue of unrestricted access to the CPT content while maintaining restricted access to pages/posts. However, the CPT taxonomy is still unavailable, and is necessary for them to be able to fully manage the CPT.
Is there a way to exclude both the CPT and it’s taxonomies from restriction?