Forum Replies Created
-
AuthorPosts
-
31/05/2019 at 01:00 in reply to: User role granted user permissions but unable to edit all users #5743
Vladimir
KeymasterTry to deactivate all plugins. Will this problem go away?
If Yes, activate plugins back one by one to isolate a reason.Vladimir
KeymasterHi @weblandschaft,
As this is not WordPress default functionality I need access to plugin which adds it, in order to check what permissions it requires. Can you share it?
Vladimir
KeymasterHi,
URE Pro edit restrictions add-on does not support TablePress due to its way of working with custom post type (more information here).
In order role can use “Add Media” button it should have ‘upload_files’ capability.
Send direct link to EasyAzon plugin if its available at wordpress.org/plugins
I need access to it in order to test and check what permissions it requires.Role is not available for deletion in URE while it was granted at least to one user. Revoke role from all users. You will see it after that at the list of roles for deletion at URE.
Vladimir
KeymasterHi Bjoern,
In order to protect post from view we need to set view restrictions at the post level.
Via user interface – open post for editing and select to which roles you allow to see its content at front-end.
By program – set related post meta fields values according to your needs.View restrictions at the role level – allows to set more exact criteria, via selected taxonomies, for example.
Vladimir
KeymasterJust be sure (re-check) that updated code was loaded at the testing page (force page refresh).
Vladimir
KeymasterOr course I will include this fix into the next update.
Vladimir
KeymasterQuick workaround:
open user-role-editor-pro/js/ure.js, go to line 552 and replace current:if ( ure_data.do_not_revoke_from_admin ) {with updated
if ( ure_data.do_not_revoke_from_admin==1 ) {Vladimir
KeymasterGood point. v. 4.51 does not allow to superadmin to edit ‘administrator’ role. It seems I tested JavaScript code from older version. It stopped working as expected after browser page refresh.
I will investigate what was changed and why.Vladimir
KeymasterURE does not allow revoke capabilities from administrator role in 2 cases:
1) for single site WordPress
2) for WordPress multisite when current user is not superadmin.This is done to prevent accidental lose of admin permissions.
Vladimir
Keymaster1) Users->User Role Editor->Add Role
2) Select ‘Administrator’ at ‘Make copy of’ drop-down menu
If ‘Administrator’ role is not available for selection, go to Settings->User Role Editor->General and turn ON ‘Show Administrator role at User Role Editor’ option.Or add new role even empty, then click a checkbox to the left from the “Quick filter” label. It will select all capabilities. Update Role.
24/05/2019 at 14:46 in reply to: Unrestricted access to CPT and its taxonomies, while restricting pages/posts. #5716Vladimir
KeymasterThanks for clarification. I work on the update. Beta version will be available for testing next week.
Vladimir
KeymasterI suppose you try to revoke capability from administrator role. URE does not allow this to prevent accident lose of access to the site management.
Workaround – create a full copy of administrator role, revoke unneeded capabilities from it. Grant it to your other admins.
Vladimir
Keymaster‘profile’ page itself or shortcode inside it know nothing about whose profile will be shown via this page. So I don’t imagine how URE can help you with realizing needed model of view permissions for such dynamic content.
Vladimir
Keymaster‘user_role_editor’ shortcode has ‘users’ attribute which allows to show content for selected user(s). But it’s static.
If you would build shortcode dynamically to insert current user ID for current user with ‘volunteer’ or ‘volunteer coordinator’ roles it may work. But in this case you do not need shortcode from URE and can show/hide page content itself I suppose.Vladimir
KeymasterYes, he will be able to delete users without this capability.
‘ure_manage_options’ is not related to user deletion at all.
Any user with list_users, ‘delete_users’ can delete user available to him at the Users list page. -
AuthorPosts