[Vladimir]

Thanks for the help. I repeated and fixed this warning. I will publish it in a few days.

[Vladimir]

Hi Weber,

1) You can add new role as a copy of ‘administrator’ role: Users->User Role Editor->Add Role->Make copy of: Administrator.
2) Revoke unneeded user capabilities, like “User Role Editor” group and capabilities related to unneeded plugin if it’s applicable to revoke them. You can look what capability protect what plugin menu items using “Admin menu access” add-on.

Btw., I don’t recommend to use any role ID, which included ‘administrator’ word. It may bring the mess to the WordPress UI and permissions processing, as due to a way how WordPress checks user permissions – as occurrence of the role ID to the string value. It’s better to use something like ‘admin_s’ instead.

[Vladimir]

I see that a mode of activation is not important. My test shows that Connections->Settings admin menu item is available in case user can ‘connections_change_settings’ capability.
More, plugin has own role editor – Connections->Roles, available to user who can ‘connection_change_roles’.

Look again if some of capabilities started from ‘connections_’ was missed for a role at subsite. I don’t see another reason without deep investigation of CBD plugin code.

[Vladimir]

If this is applicable, you may send admin login credentials to support[at-sign] role-editor.com (better if you have a stage copy of the site). I will investigate this.

[Vladimir]

URE does not include such functionality.
You can use another plugin for this purpose:

LoginWP (Formerly Peter's Login Redirect)

[Vladimir]

Compare if you have the same choice for “the Settings->User Role Editor->Additional Modules” ->”Force custom post types to use their own capabilities” option at all 3 different sites.

[Vladimir]

Hi,

Is CBD plugin network activated?
Or do you activate it for every site separately?

[Vladimir]

Hi,

Look at this add-on:
https://www.role-editor.com/block-admin-menu-items

[Vladimir]

Try grant to a role the deprecated ‘level_1’ capability, and ‘manage_options’ capability, in addition to all capabilities, started from ‘rank_math_’.

[Vladimir]

Thanks for the clarification. I just returned to office. Let me make some tests with this app.

[Vladimir]

Edit restrictions should work if app uses WordPress built-in WPQuery to extract data from the database. I see few different plugins which offers to built WP app for WordPress site. Which one do you use?

[Vladimir]

“Tools->WP Mail Log” menu item is protected by ‘manage_options’ user capability.

[Vladimir]

Hi,

Is “WP Mail logging” available at wordpress.org/plugins? If Yes, send the link.

[Vladimir]

This problem is not related directly to the user permissions. But comes from how WordPress checks if user has access to the an admin page. WP checks if user has access to the admin menu item correspondent to the admin page, but if it’s not defined shows the access error message event if user has full access to this custom post type.
at the end of wp-admin/includes/menu.php:

if ( ! user_can_access_admin_page() ) {

	/**
	 * Fires when access to an admin page is denied.
	 *
	 * @since 2.5.0
	 */
	do_action( 'admin_page_access_denied' );

	wp_die( __( 'Sorry, you are not allowed to access this page.' ), 403 );
}

$menu = add_menu_classes( $menu );

You can find function user_can_access_admin_page() at wp-admin/includes/plugin.php file and look how many criteria WP checks for admin page access, not only related user capability.

You need to investigate how correctly define admin menu to show custom post type from there, not from the default WP menu for CPT. May be look to some other plugin code, which make something similar.

[Vladimir]

Yes, follow this article:

How to update Pro version

[Author]

Posts