Deny user profile access?

[Vladimir]

Hi Levent,

It’s clear now. You tried ‘Block not selected’ model at ‘Admin menu’ settings for the ‘klienttest’ role. This model is too restrictive. It blocks all URL and removes from the left side menu and from the top admin menu bar all menu items, which are not apparently allowed. It has some other side effects also.
I switched ‘Admin menu’ selection for this role to “Block selected” and reverted menu items selection. “Enable Visual Builder” button at admin menu bar is visible for this role now.

You should always minimize role access via user capabilities 1st and block menu items via ‘Admin menu’ when you can not revoke user capability, as it is required for some other purpose (used by other menu item too, for example).
So I revoked from the ‘klienttest’ role these capabilities:
edit_themes,
delete_themes,
activate_plugins,
delete_plugins,
create_users,
delete_users,
promote_users.

With ‘Block selected’ model you have to re-visit ‘Admin menu’ for the restricted roles after you activate new plugin, as some new menu items may become available for the roles, while they should be blocked.

[summerfeeling]

That makes sense and sounds logical. Thank you for your help. (:

[Author]

Posts