Forum Replies Created
-
AuthorPosts
-
Vladimir
KeymasterHi Kevin,
Thank you very much. Finally I found where WordPress uses “category_name” and “tag” parameters at the ‘Posts’ page. I added it to the list of “allowed” for the development version 4.29.b8 (available for testing).
Vladimir
KeymasterHi Kevin,
The latest stable version of URE Pro is 4.28.2. It has less problems with WordPress default filtering and sorting that 4.27.1.
I added ‘comment_status’ parameter to the development version. It (4.29.b7) is available for testing. I plan to publish it as a stable one in 1-2 weeks.Show me a screenshot of the top part of the ‘Posts’ page with ‘filter’ controls. I suppose it differs for the WordPress default one.
Vladimir
KeymasterWill editor can edit those fields if you deactivate User Role Editor?
Vladimir
KeymasterHi Urs,
The editor gets forwarded to the dashboard if accessing the second menu in the drop-down list.
This issue has the same reason as the problem you described at 08.10.2016. It was described here.
I registered ‘action’ and ‘menu’ parameters for the nav-menus.php at development version 4.29. Beta 5 will be available for testing this week. I will just finish some tests with it myself.
Yes, unfortunately I reintroduced this bug after refactoring “Admin menu access” add-on code this year. It’s necessary to apparently register URL arguments for WordPress commands which used/blocked with “not selected” model – I missed some such arguments. So thanks again for your help.
Vladimir
KeymasterHi Urs,
Thanks for this information. I will include a fix to the next update.
Vladimir
KeymasterHi,
I suppose that it’s a screenshot made from the free version of User Role Editor. Login to the role-editor.com and download a copy of Pro version from this link.
Pro version includes its own copy of a free version (or the core of a User Role Editor). So you should deactivate free version and can remove it before installing of a Pro version.
The only thing that you should remember is that both versions (free and Pro) use the same place to store their settings data.
So if you delete free version via WordPress Plugins Delete link, plugin will delete automatically its settings data.
You will have to configure User Role Editor Pro Settings again after that.
Right decision in this case is to delete free version folder (user-role-editor) via FTP, not via WordPress.Vladimir
KeymasterHi Kevin,
What version of URE Pro do you use?
Parameter author is supported already for URLS like:
edit.php?post_type=post&author=2004
e.g., when we click on the ‘Mine’ tab.Built-in WordPress filter by category uses ‘cat’ parameter, e.g.
edit.php?s&post_status=all&post_type=post&action=-1&m=0&cat=5&filter_action=Filter&paged=1&action2=-1
It works too.Do you use some plugin for posts filtering? Let me know what plugin (download link is appreciated). I will add its parameters to the allowed parameters list.
Vladimir
KeymasterHi,
Feeds are filtered by current version – just re-tested.
There is something special for your installation, may be a conflict with some plugin.
Do you have (can setup) a stage/development copy of this site to repeat this issue and where I may test it on-line?In other case try to deactivate temporally all plugins except URE Pro. Will it change posts listed in the feed?
Vladimir
KeymasterI developed a fix for this. It works conditionally now and takes an account the result from custom filter:
add_filter('ure_not_block_other_roles_for_local_admin','ure_block_other_roles_for_local_admin'); function ure_block_other_roles_for_local_admin($flag) { return false; }
You may add this code to the active theme functions.php file or setup it as a “must use” plugin.
In order this filter start to work you need to replace 3 files at current 2.28.2 version folder:
includes/classes/ure-lib.php
pro/includes/classes/other-roles-access.php
pro/includes/classes/ure-lib-pro.phpI will send the zip with updated files above to your email.
Of course this update will be included to the next version. Development version beta5 is on the road to the public testing stage currently (includes some unfinished changes) so I do not make it available for a while.Vladimir
KeymasterTimeout. Recommendation above will not work. I search a solution.
Vladimir
KeymasterHi,
Currently User Role Editor Pro “Other Roles Access” add-on does not apply any restrictions for the users with ‘administrator’ role. My apologies for confusion as URE allows to edit the other role access restrictions for ‘Administrator’ role at the same time.
I will add a custom filter for this with a next update. So you may change this logic – apply other roles restrictions to the local administrators under multisite or not.
A quick workaround for current 4.28.2 version: open wp-content/plugins/user-role-editor-pro/pro/classes/other-roles-access.php file and comment lines 125, 126, 127, so you should get this code:
protected function blocking_needed() { global $current_user; // do not block data for superadmin $multisite = $this->lib->get('multisite'); if ($multisite && is_super_admin()) { return false; } // do not block data for local administrator //if ($this->lib->user_has_capability($current_user, 'administrator')) { // return false; //} // user can update access to other roles if ($this->lib->user_has_capability($current_user, self::other_roles_access_cap)) { return false; } ...
Vladimir
KeymasterKevin,
As a quick fix you may replace the file
wp-content/plugins/user-role-editor-pro/pro/includes/classes/admin-menu-url-allowed-args.php
with the file from the zip attached to the message I emailed you directly.Let me know the result when you find a time to test it.
Vladimir
KeymasterHi Kevin,
Thanks for the additional information. I reproduced this issue. It’s the bug.
As we apparently allow just ‘edit-comments.php’ URL under ‘block on not selected’ model URE blocks by default any URLS which differs from ‘edit-comments.php’.I should add ‘comment_status’ to the list of allowed parameters for ‘edit-comments.php’. I will do it with the next update to User Role Editor Pro.
I will let you know when development version with this update will be available for testing. I will try to prepare it until October 10th, 2016.Vladimir
KeymasterThanks for the feedback.
05/10/2016 at 01:54 in reply to: Unable to Restrict Access within WP Admin on One Specific Site #2843Vladimir
KeymasterHi Kevin,
Thanks for sharing this information.
-
AuthorPosts