Prohibit authors attachments deletion

Suppose you wish to prohibit WordPress attachments deletion for your authors. WordPress manages access to the Media Library items (attachments) using ‘posts’ capabilities set. Yes, the key capability to access the ‘Media Library’ is ‘upload_files’, but in order to edit uploaded image attributes a user needs ‘edit_posts’ capability, in order to delete uploaded video a user needs ‘delete_posts’ capability, etc. So there is no way to prohibit attachments deletion for users who may (and should) delete posts with WordPress default Media Library permissions model.

Pro version of User Role Editor offers a workaround – ‘Force custom post types to use their own capabilities’ option: Read more Prohibit authors attachments deletion

Manage access to MyMail – Email Newsletter Settings tabs

MyMail – Email Newsletter Plugin for WordPress” Settings page includes 14 tabs. Not all of these tabs are protected by different user capabilities. How to make available the different list of these tabs for different WordPress user roles? Let’s see it on example of hiding some tabs from non-administrator users. Read more Manage access to MyMail – Email Newsletter Settings tabs

Why user loses edit post capabilities or IgnitionDeck Framework special feature

One of the User Role Editor plugin users asked me, why user loses edit posts capabilities assigned to him directly. The issue takes place on a regular basis.
You assign to the user ‘edit_posts’, ‘edit_published_posts’ capabilities with other post’s related capabilities together. But after login and opening ‘Posts’ menu item that user loses his access to the ‘Posts’ menu. If you check his user capabilities after that you will see that he lost all edit post capabilities somehow. Read more Why user loses edit post capabilities or IgnitionDeck Framework special feature