View and Edit restrictions – complex example

Imagine an organization with a few departments. Each worker should be capable to read the posts of its own department plus the posts general for all organization. Some workers of each department should be capable to create/edit posts of their own department only. Guests (not logged-in visitors) should view only general posts and should not view restricted posts related to the departments.
Such task difficult for the “just-from-the-box” WordPress may be resolved easy with User Role Editor Pro content view and edit restrictions add-ons configured together. Read more View and Edit restrictions – complex example

Prohibit authors attachments deletion

Suppose you wish to prohibit WordPress attachments deletion for your authors. WordPress manages access to the Media Library items (attachments) using ‘posts’ capabilities set. Yes, the key capability to access the ‘Media Library’ is ‘upload_files’, but in order to edit uploaded image attributes a user needs ‘edit_posts’ capability, in order to delete uploaded video a user needs ‘delete_posts’ capability, etc. So there is no way to prohibit attachments deletion for users who may (and should) delete posts with WordPress default Media Library permissions model.

Pro version of User Role Editor offers a workaround – ‘Force custom post types to use their own capabilities’ option: Read more Prohibit authors attachments deletion