Forum Replies Created
-
AuthorPosts
-
11/02/2021 at 16:22 in reply to: Give User Full Access to "Page" but restrict Post ID in "Post Type" #7362
Vladimir
KeymasterHi,
I fixed the linked article. Code is available now. Just replace ‘post’ with your custom post type slug.
Yes, you can place it to functions.php file.
Vladimir
KeymasterTry to block unneeded admin menu items using “Admin menu blocking” add-on.
Btw., I work on add custom taxonomies to the code executed for the URE’s option
“Force custom post types to use their own capabilities”. This will replace ‘edit_posts’ for such taxonomies with ‘assign__terms’ capability. So you will not need to add ‘edit_posts’ for custom post types. I plan to add this to the next udpate. Vladimir
KeymasterYour reply have waited moderation due to the 2 link included. Thanks for the notification about this.
I see that individual capabilities don’t work for your taxonomies. What about to try ‘edit_posts’ and if it will not help, ‘manage_categories’?
Vladimir
KeymasterHi,
1st, look for the assign_
_terms user capability. If you don’t see it and it does not work if you try manually add it, then I can suppose that custom taxonomy is defined with default capability type. Try to add to a role ‘edit_posts’ and/or ‘manage_categories’ capability. Vladimir
KeymasterHi,
Thanks for this note. I repeated and confirm this issue with hiding meta boxes in Gutenberg. I will inform you as prepare a fix.
Vladimir
KeymasterHi,
Is user restricted with ‘edit post/page restrictions‘ add-on?
If Yes, show(via external URL) or send to email the screenshot with edit restrictions settings for this user and/or his role.Vladimir
KeymasterLearndash->Overview is protected by ‘manage_options’ capability. So you 1st, grant to a role ‘manage_options’ capability. Then open for this role the ‘Admin menu’ and block menu items, which use the same ‘manage_options’ (like “Settings”, but are not needed for your role/user.
Vladimir
Keymaster“URL Parameters White List…” allows to inform URE about URL parameters which you allow to use for not blocked links/menu items. It’s useful when you use “Block not selected” model blocking access to admin menu items.
Vladimir
KeymasterHi,
Beta version 4.59.2.b1 contains the required fix. It’s available after login from the same Download page, where you take a stable version.
Could you please test it and share the results?
Vladimir
KeymasterE.g. mentioned by you “Learndash->Reports, and Learndash->Settings” menu items, which also are protected by ‘manage_options’ capability. So you 1st, grant to a role ‘manage_options’ capability. Then open for it ‘Admin menu’ and block menu items, which use the same ‘manage_options’, but are not needed for your role/user.
Vladimir
Keymaster1st, “Activate per plugin user access management for plugins activation” add-on has another purpose. It’s designed when you prepare the site for a client, installed and activated some plugins and do not wish that client see them and can deactivate, but at the same time you wish to allow for client to activate/deactivate some other pre-installed plugins. It’s all not about access to the some specific items at the admin menu.
2nd, you have “Admin menu access” add-on. Which you can use:
1) to get information about what capability protects what admin menu item. Just open “Admin menu” for the ‘Administrator’ role, which has access to the all admin menu items by default.
2) In case you can not block/hide unneeded menu items revoking related user capability from user role, like ‘manage_options’ for example, you can block the “Settings” menu item here, but user still will have access to the menu, which is also protected by ‘manage_options’.It’s possible to include screenshots here if use external links. Be aware that message which contains > 2 links, automatically gets ‘pending for moderation’ status. (If I missed and did not approved it, it’s better to send the remind).
Vladimir
KeymasterYou found a bug. Thanks for your help.
URE does not save changes in case its option “Confirm role update” is switched Off.
Work temporally with confirmation of any update. I will add the fix with a next update.Vladimir
KeymasterUnder “revoke” user capability I mean turn OFF the checkbox to the left of user capability.
If you try to edit capabilities directly for user (not for a role), take into account that you can not revoke (un-check) for a user a capability which granted to a user via role. That is why it is grayed out.Vladimir
KeymasterCan I look at one of the sites where URE does not save capabilities with administrator permissions, possibly development copy without critical data? If Yes, send URL and login credentials to support [at-sign] role-editor.com
Vladimir
KeymasterHi,
I reproduced your issue at my own test site. I will inform you when I find a reason and develop a fix.
Thank you for the report about this problem.
-
AuthorPosts