Forum Replies Created
-
Posts
-
Having all CPTs using own capabilities, when you add ‘edit_post’, role should get access to CPT, to which you not granted access.
What’s a problem now?You have 2 ways to achieve this:
1) Force all CPT to use own capabilities, like ‘edit_videos’ for ‘Video’ CPT, etc. Use similar checkbox under ‘Edit restrictions’ section at Settings->User Role Editor->Additional modules tab. You may need to go through your roles to check if they do not lose needed access, like Media Library item editing, which will use edit_attachements instead of edit_posts.or
2) User Admin menu blocking add-on to block admin menu items for CPTs unneeded to this role.
Hi,
By default even contributor with just ‘edit_posts’ can turn ON/OFF categories checkboxes. Try to deactivate related plugins just to check if there is some conflict.
But I don’t want this role to be able to delete any pages, not even the pages I gave them access to edit.
Just remember that is default WordPress permissions – in order to delete item from Media Library user should can delete the page to which this image was attached.
There is workaround for your situation – force WordPress to use unique user capabilities for all post types including ‘attachment’ one.
Make fresh database backup – for the case if you will wish to rollback changes.
Go to Settings->User Role Editor->Additional Modules. Turn ON “Force custom post types to use their own capabilities” option under “Content editing restrictions” section. Go through your roles and check if they need new created capabilities, like for ‘Attachments’ post type.You can grant to a role ‘delete_attachments’ instead of ‘delete_pages’, etc. in this case.
It seems we missed ‘delete_published_pages’. Try to add it.
If issue is still there: Some plugin may change WordPress default behavior. Try to deactivate all plugins and test. If that will help, activate plugins back one by one to isolate a reason.
WordPress checks for media library item the same permissions as for the posts or page to which it is attached. So if user can delete page he can delete image attached to this page too. Try delete_pages and delete_others_pages.
When user restricted by edit a specific page – he sees/can edit/delete this page only and sees only his own images and images attached to this page.
If all your CPTs are protected by ‘edit_posts’, you can force them to use their own capabilities, look for the special checkbox at the Settings->URE->Additional Modules. Then do not grant edit_mgas and edit_insuarance-company-retails to consumer role.
Do not hurry with edit restrictions. User should be capable to edit desired page 1st. I suppose that page (which you wish this user edit) was created by other user. edit_others_pages capability is required in this case. Try to add it to a role.
And just when your user will can edit a page, maybe between others, proceed with page ID to restrict editing by this single page only.
Switch off ‘edit restrictions’ temporally. Check if user can edit this page among other pages without any additional restrictions.
Is this page has a published state. Then you have to grant ‘edit_published’ pages in order user ca edit it.Take into account that with edit restrictions activated, only those pages are visible to a user at the Pages list, which this user can edit.
Hi,
1) Allow this role to edit pages including this one.
2) Use Posts/pages edit restrictions add-on and input for a role page ID, which you allow to edit for this role. After that user with this role will can edit this single page only.Hi Martin,
Thanks for clarification. I need investigate this. The best way to take a copy of your site (without uploads folder) and work with it under my local development environment. If it’s possible (the best variant – stage copy without valuable/critical information), send credentials to support [at-sign] role-editor.com
URE does not offer such way. Every subsite has own list of pages and/or categories. You can restrict access to them on per site – per page/category basis only.
Right, ‘Update Network’ overwrites all roles at subsites with exact copy from the main site. It’s intended for the case when you have identical roles at all subsites. If you plan to have different roles between subsites you should not use ‘Update Network’.
Every subsite under WordPress multisite stores its roles separately.
It’s possible to manage all roles at one place – main site. When you go to Network admin->Users->User Role Editor, you work really with roles from the main site. “Update Network” button there allows to replicate all roles from the main site to all other subsites.
If you plan to give permission for user to selected site only you may use WP built-in UI: Network admin->Sites: select site, click ‘Edit’ link, open ‘Users’ tab, add existing or new user, grant him needed role. User will have this role at this site only.
