[Vladimir]

– Check if valid role was really assigned to the user. Try to assign to him some other role, then needed role back again. Sometimes it helps.
– Check related theme’s settings, compare them with those were set at dev. environment.

[Vladimir]

Is it possible that your theme setup the different menus for the different roles?
Try to test admin menu access with the WordPress default 2015 theme.

[Vladimir]

Yes, use ‘Admin menu access’ add-on for this purpose:
https://www.role-editor.com/block-admin-menu-items

[Vladimir]

OK. I see now that admin menus are really different and user can edit posts but does not see ‘Posts’ menu.

Are you sure that all WordPress customizing plugins are disabled at your site when you get this picture?

[Vladimir]

Thanks.
1st, to be sure that there is no other code preventing needed access, could you deactivate all plugins?
2nd, what menu item is unavailable for other (non-admin) user?

[Vladimir]

If user doesn’t see the menu with both plugins deactivated (I suppose that you don’t have some other menu blocking plugin) then user does not have enough permissions for this menu.

OK. Let’s clarify, what do you name ‘Dashboard’ menu.
WordPress has ‘Dashboard’ menu item with submenu consisted from 2 items: Home, Updates.
Do you write about this menu?
Or do you write about full admin menu? What menu item user does not see? Let’s try to resolve a problem with some menu item 1st.

[Vladimir]

I didn’t understood for what you showed me the log about to access to the ‘Menu Editor Pro’ menu item. You wrote earlier that you have a problem with access to the ‘Dashboard’ menu. Or do the problem is about the access to the other menu item?

Anyway please answer on my questions:
Did you try to deactivate both plugins which you suppose are conflicting? Did it help to get access to the missed menu?
Did you try to activate plugins separately?
Do user loses access to the menu item after some plugin separate activation?

[Vladimir]

– Deactivate free version;
– Download Pro version. It’s available after login from this page:
https://www.role-editor.com/download-plugin/
– install Pro version into the separate ‘wp-content/plugins/user-role-editor-pro’ folder via FTP;
– activate Pro version;
– go to ‘Settings->User Role Editor->General’ tab;
– input the license key there.

[Vladimir]

Hi,

I don’t know any compatibility issue between AME and URE to this moment.
1st of all, a role should have the ‘read’ capability to get access to the ‘Dashboard’ menu.
Check if ‘Dashboard’ menu is not blocked at both plugins.
Will ‘Dashboard’ menu appear for user if you deactivate AME and URE both?
If ‘Yes’ try to deactivate only one plugin to know what plugin causes access problem. Then check its settings for this menu item again.

[Vladimir]

If you need to replicate the only 1 role to all subsites you may go to the main site of your network and open User Role Editor there. Select role – ‘editor’ in your case, turn on needed capabilities, turn on ‘Apply to All Sites’ checkbox at the top:
https://storage.googleapis.com/role-editor/downloads/support/ure-apply-to-all-sites.png
Then click ‘Update’.

‘Network Update’ button in the User Role Editor at the ‘Network Admin’ center fully overwrites all roles at all sites by the roles from the main site.

[Vladimir]

Yes, add ‘No role for this site’ option to the list of roles to which you prohibited view access to the post.

https://storage.googleapis.com/role-editor/downloads/support/ure-content-view-restrictions-no-role-for-this-site.png

[Vladimir]

Pay attention that WordPress has 2 built-in post types: ‘post’ with capability type ‘post’ and ‘page’ with capability type ‘page’. When you set capability type of your custom post type as ‘page’ you will not see any new capability at ‘Custom capability’ as there is a set of WordPress built-in capabilities, like ‘edit_pages’, ‘delete_pages’, ‘publish_pages’, etc.

[Vladimir]

I tested the custom post type with “Custom Post Type UI” plugin in order to help you. Capability type was set to ‘page’. Such custom post type is unavailable to user without ‘edit_pages’ capability as expected. Open “Admin Menu” for the ‘Administrator’ role and look, what real capabilities are in use to protect your custom post type.
Some mistake takes place possibly if you define custom post type using PHP code and it takes default ‘post’ capability type then.

[Vladimir]

Hi,

Thank you. I confirm the bug with roles saving at ‘view restriction’ meta box for attachments. I fixed it in development version.

But this restriction just exclude the attachment post from listing by WordPress when attachment listing required directly. It does not protect file from download by typing its direct URL in the browser. It does not exclude this attachment from the posts or pages to which this attachment was included.

As a temporal workaround you may use URE shortcode:
https://www.role-editor.com/shortcode-content-view-access-restriction/
and show file URL or download link for the allowed role only.
It still will not prevent any visitor who knows direct URL from download this file, but download URL at the content will be available for the authorised users only.

In general you need a routine which should not show a direct URL to the file, but use the some kind of a download link, which will lead to the script where download will be started after checking user permissions only.

It’s possible that I will include such feature to the User Role Editor with time. Something like ‘digital file protection’ add-on.

Btw, may be some plugin from this list may help you to restrict access to the downloadable file using roles:
http://www.wpstuffs.com/plugins-to-manage-digital-downloads/

[Vladimir]

Hi,

I need more information: show ‘Settings->User Role Editor->Additional Modules’ tab screenshot and what value is set at the ‘CPT UI->Edit Post Types->Capability Type’ field for the ‘photo’ custom post type.

[Author]

Posts