Customize is blocked but still has access

[MissWebsite]

I have blocked access to
Appearance – Themes
Appearance – Customize
Appearance – Widgets

edit- Dashboard is unchecked (disabled)
They can view it, that is great.

The problem is if they go to screen options, they can choose to see the Welcome section. Once this happens, they have access to Customize and a bunch of other options – like change your theme completely, widgets and so on.

It seems these options should not be allowed if they manually type in the link as well.

Thank you for looking.
Carolyn

[MissWebsite]

I re-read my post and dont think I was clear. Let me try again.

If you go to the Dashboard, then choose Screen Options, then click Welcome, you then get access to everything that is denied such as Customize, Widgets, and so on.

[Vladimir]

Hi Carolyn,

I confirm this issue. Thanks for letting me know. I will fix it: block that button and check why ‘Customize’ URL was not blocked.

[Vladimir]

Hi Carolyn,

The issue with blocking direct access to the customize.php link was fixed with version 4.18.3. Please update and test.

[MissWebsite]

Hi Vladmir, I tested several different configurations and they all worked perfect! I even tried the direct links and they did not work. Perfect! Thank you so much! Carolyn

[Vladimir]

Hi Carolyn,

Thanks for the feedback.

[Author]

Posts