[Vladimir]

I just re-tested successfully with GF v. 2.1.3.8
Is it possible to look at your site on-line? If ‘Yes’, send admin credentials to support [at-sign] role-editor.com

[Vladimir]

What version of Gravity Forms do you use?

[Vladimir]

Hi,

It’s not possible currently.

[Vladimir]

I see and can repeat a problem at my test environment. Thanks for your help in discovering it. I will publish the update in a week.

When you use ‘Block not selected’ model at ‘Admin menu’, URE allows just exact URLs linked to the selected menu items: users.php for ‘All Users’ menu in your case. Pay attention – without any parameters. But when we search a user, an URL will be:
users.php?s=edit&action=-1&new_role&paged=1&action2=-1&new_role2
Pay attention on a list of additional parameters added to it.
URE counts such URL as prohibited, that’s why contributor user is redirected to the 1st available menu item every time he try use a search feature at the ‘Users’ page.

I should add those parameters to the list of allowed parameters for the user.php URL, but I missed this.

Temporal workaround – switch to the ‘Block Selected’ model at ‘Admin menu’:
– select ‘Block selected’ at the top, then click on the top left checkbox with a ‘Shift’ key together – this will invert menu items selection. Save your updates.

Recommendations: try to exclude unneeded menu items by revoking the related user capabilities 1st. Use ‘Admin menu’ to block menu items just for menus which you can not exclude via user capabilities, like in case with ‘edit_posts’. ‘Admin menu’ is the extension to the core permission system. But ‘user capabilities’ is primary defence level.

You can easily exclude some menus without ‘Admin menu’, just by revoking ‘manage_links’, ‘manage_eventon’ capabilities from ‘contributor’ role.

[Vladimir]

I didn’t get reports about incompatibility issues between URE and MUM yet.
With User Role Editor Pro you can follow this scenario:
1) add new user to the main site.
2) grant needed roles to this user.
3) open this user capabilities under the ‘Network admin -> Users -> All users’
You will see permissions which granted to him for the main site
Click “Update Network” button to add this user with the same roles and capabilities to all the rest subsites of your multisite network.

Roles and capabilities should exist at subsite in order to be granted to the new added user.
Use ‘Network admin -> Users -> User Role Editor -> Update Network’ to replicate all roles and capabilities from the main site to all the rest subsites of the network.

I think that following a scenario above you can do the same work as a MUM plugin offers according the quote you noted.

[Vladimir]

Pro version is built on the top of a free version and includes a copy of a free version as a core. Thus both free and Pro version use the same database record to same the settings you made. When you delete free version via WordPress options record was removed and Pro version had to start with default options.

Send administrator login credentials to the support [at-sign] role-editor.com
I will check your settings on-site.

[Vladimir]

Do you have any blocked menu items with ‘Admin Menu’ for a ‘contributor’ role? Show screenshot.

[Vladimir]

list_users capability allows access to the users list and search.
Just re-tested with single site WordPress – it works.

[Vladimir]

Thanks for letting me know that issue was resolved.

[Vladimir]

Thanks for letting me know that issue was resolved.

[Vladimir]

Hi,

Thanks for the feedback.

In order to add/edit/delete users role should have at least these capabilities:
– list_users;
– edit_users;
– delete_users.

[Vladimir]

Hi Jakub,

You can use any permalink settings. A fact that you can use post/page ID to restrict its editing for user or role does not prevent to show that post/page to the public with user/SEO friendly permalink.

If you wish to set edit restriction for user automatically, it’s possible via this filter.

You can get current user login, built his landing page slug, find that page ID and return it from this filter as the only page which user is allowed to edit.

[Vladimir]

I never reported WordPress bugs yet. Look at this guide.
I did not find any bug which mention ‘new_role2’.
There will be no problem if you will not find if this bug is reported or not, I think. Moderator will do it, finally.

[Vladimir]

Yes, it’s definitely a WordPress bug. Look at wp-admin/network/site-users.php, from line #141:

if ( empty( $editable_roles[ $_REQUEST['new_role'] ] ) ) {
				wp_die( __( 'Sorry, you are not allowed to give users that role.' ) );
			}

But when you click ‘Change’ button from the bottom ‘new_role’ is empty, new role value is sent with ‘new_role2’ parameter. But ‘new_role2’ is never checked.

P.S. I will remove your posts with roles data as unrelated to the subject – data before and after are identical.

[Vladimir]

This is a video how it works at my test setup with all plugins deactivated.

It’s definitely not related to URE. I can just suppose that something is wrong with your installation.

You can send to suport [at-sign] role-editor.com a download link to your test installation database backup. I will try to repeat this issue at my local test environment, where I can debug it (if it will be repeated) to isolate a reason. Send me your test wp-config.php also.

[Author]

Posts