[Vladimir]

Hi,

Thank you. I confirm the bug with roles saving at ‘view restriction’ meta box for attachments. I fixed it in development version.

But this restriction just exclude the attachment post from listing by WordPress when attachment listing required directly. It does not protect file from download by typing its direct URL in the browser. It does not exclude this attachment from the posts or pages to which this attachment was included.

As a temporal workaround you may use URE shortcode:
https://www.role-editor.com/shortcode-content-view-access-restriction/
and show file URL or download link for the allowed role only.
It still will not prevent any visitor who knows direct URL from download this file, but download URL at the content will be available for the authorised users only.

In general you need a routine which should not show a direct URL to the file, but use the some kind of a download link, which will lead to the script where download will be started after checking user permissions only.

It’s possible that I will include such feature to the User Role Editor with time. Something like ‘digital file protection’ add-on.

Btw, may be some plugin from this list may help you to restrict access to the downloadable file using roles:
http://www.wpstuffs.com/plugins-to-manage-digital-downloads/

[Vladimir]

Hi,

I need more information: show ‘Settings->User Role Editor->Additional Modules’ tab screenshot and what value is set at the ‘CPT UI->Edit Post Types->Capability Type’ field for the ‘photo’ custom post type.

[Vladimir]

Wolf,

Does role contain ‘upload_files’ capability?
Also a theme should support this widget. Do you see that widget under editor or administrator role?

[Vladimir]

Login under that user and click on the “Screen Options” link at the top right corner and check if a “Featured image” checkbox is turned on their.

[Vladimir]

This code removes items from the list of parent pages at the ‘Page Attributes’ meta box placed to the right at the page editor screen. It does not related to any ‘main menu’.

If you name ‘main menu’ the menu to the left at the WordPress wp-admin, then use ‘Admin menu’ access add-on to block/hide that menu items from users:
https://www.role-editor.com/block-admin-menu-items
You don’t need any additional code for that.

If you write about some other menu, please clarify what menu do you mean.

[Vladimir]

Yes, replace ‘mynewrole’ with your own role name, for which you wish to setup the restriction.

[Vladimir]

Hi,

This code removes items from the “Parent” menu at the “Page attributes” meta box of the page editor.

Do not touch ’10, 2′ values. 10 – is a priority of execution, 2 – is a quant of parameters in use.

Page ID at the code sample is 47. If you need to remove a list of pages, add IDs as a comma separated list:

$args['exclude'] = array(47, 52, 67);

You may find page ID at the pages list – look post parameter value at the ‘Edit’ link under needed page. For example:

wp-admin/post.php?post=876&action=edit

Page ID is 876 for the link above.

[Vladimir]

Thanks for the feedback and suggestion.
While web-site invoice is not printable, send your company name, address, VAT Number (if needed) to [email protected] email. I will send you an invoice in PDF format then.

[Vladimir]

Hi,

replace

$thisUserPermissions =  $role;

with

$thisUserPermissions =  $name;

As user may have multiple roles assigned, it will be more universal to concatenate role names comma separated.

[Vladimir]

Thanks, Armin, for your feedback, suggestions and constructive critique.
I agree with you and try to dedicate more time for the detailed documentation of plugin features.

[Vladimir]

Hi Armin,

I will add this kind of update as an option. Thanks for the suggestion.

[Vladimir]

Yes, solved. This feature was included into the version 4.19.

[Vladimir]

Hi Armin,

Yes, it may help. Thanks.

[Vladimir]

Thanks. Your suggestions are clear and helpful. I will include this work into my development plan. I will inform you as 1st update related to this functionality will be available.

[Vladimir]

Thanks for sharing this.

It’s a good point to start with.
Let’s imaging we have the ‘Roles’ menu under Network Admin, which lists all existing roles in alphabetical order. And what’s further? This needs to be discussed.
Users under Network Admin is about add/remove a user to the subsite. There is nothing about user rights at that subsite here, because user may have different roles and capabilities at every subsite.

We may list roles similar Users list, that is to show the list of roles with sublist (at every role row) of subsites at which this role exists.
But:
1) if you wish to edit this role, physically it has a separate data set at every subsite. So the link ‘Edit’ under the role does not have sense in this mode. We need ‘edit’ link for every subsite.
2) There are the multisite networks with very large quant of subsites (thousands). So the listing of this kind is unusable for the large networks.

2nd (preferable) way to show this information – list all existing roles from all existing subsites as a separate rows with these required columns: role name, subsite. So you may quickly filter out needed role. There will be the ‘Edit’ link to open the selected role of selected subsite, ‘Delete’ link.
What’s additional (including network related) functionality may be needed/available here?

As about current model of work with roles under network admin, it’s appeared not at the empty place. A lot of multisite network owners wish to have the same roles set at every subsite. So this is a way to synchronize changes from the main site to the whole network.
I’m ready to include more details to the confirmation message linked to the ‘Network Update’ button. Do you have your variant of such message?

[Author]

Posts