Home › Older Changes

Older Changes

[4.64.4] 15.12.2024

Core version: 4.64.4

  • Core version was updated to 4.64.4
  • Security Fix: Users – “Add Role”, “Revoke Role” buttons: Cross-Site request forgery to privilege escalation was possible due to missed nonce validation. This issue was discovered and responsibly reported by vgo0.

[4.64.3] 04.12.2024

Core version: 4.64.3

  • Update: Marked as compatible with WordPress 6.7.1
  • Core version was updated to 4.64.3
  • Fix: PHP Notice: “Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the user-role-editor domain was triggered too early.” was fixed (shown only for those who used own .mo translation file installed).
  • Fix: Miscellaneous translation functionality (l18n) usage enhancements were applied.

[4.64.2] 26.03.2024

Core version: 4.64.2

  • Update: Marked as compatible with WordPress 6.5
  • Update: Content view restrictions add-on: historically if field “For users” was empty, URE applies “Selected Roles” to the existing post (in case it was not assigned yet), but a default value set by user at URE Settings is applied in both cases, for new added and existing posts.
  • Fix: Posts/pages edit restrictions add-on: endless recursion calls issue (conflict with “The Events Calendar” plugin) was fixed.
  • Fix: Admin menu access add-on:
    – full URL (including domain) was used for some menu items. For this reason checkboxes of such menu items may lose selection in case of replication of admin menu restrictions to all subsites under WP multisite. Re-check your admin menu access settings just in case mentioned menu items became unchecked after this update.
    – strpos(): Passing null to parameter #1 ($haystack) of type string is deprecated in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/admin-menu-view.php on line 253
  • Fix: wp-admin pages permissions viewer: Undefined array key -1 in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/page-permissions-view.php on line 137
  • Fix: Deprecated: explode(): Passing null to parameter #2 ($string) of type string is deprecated in wp-content/plugins/user-role-editor-pro/pro/includes/classes/utils.php on line 181
  • Fix: Notice: Array to string conversion in wp-content/plugins/user-role-editor-pro/pro/includes/classes/posts-edit-access-user.php on line 965
  • Core version was updated to 4.64.2
  • Update: URE_Advertisement: rand() is replaced with wp_rand().
  • Update: URE_Ajax_Proccessor: json_encode() is replaced with wp_json_encode().
  • Update: User_Role_Editor::load_translation(): load_plugin_textdomain() is called with the 2nd parameter value false, instead of deprecated ”.
  • Update: URE_Lib::is_right_admin_path(): parse_url() is replaced with wp_parse_url().
  • Update: URE_Lib::user_is_admin() does not call WP_User::has_cap() to enhance performance.
  • Update: Plugin version was added to CSS loaded to the “Users”, “Users->User Role Editor”, “Settings->User Role Editor” pages.
  • Update: All JavaScript files are loaded in footer now.
  • Fix: “Users->Add New Users”. Unneeded extra ‘table’ HTML tags was removed (thanks to Alejandro A. for this bug report).

[4.64.1] 30.10.2023

Core version: 4.64.1

  • Fix: Notice shown by PHP 8.3 is removed: PHP Deprecated: Creation of dynamic property URE_Export_Single_Role::$editor is deprecated in wp-content/plugins/user-role-editor-pro/pro/includes/classes/export-single-role.php:23
  • Fix: Notice shown by PHP 8.3 is removed: PHP Deprecated: Creation of dynamic property PluginInfo_1_3::$requires_php is deprecated in /wp-content/plugins/user-role-editor-pro/pro/includes/plugin-update-checker.php on line 801
  • Fix: Notice shown by PHP 8.3 is removed: PHP Deprecated: Creation of dynamic property PluginInfo_1_3::$license_state is deprecated in /wp-content/plugins/user-role-editor-pro/pro/includes/plugin-update-checker.php on line 801
  • Fix: Notice shown by PHP 8.3 is removed: PHP Deprecated: Creation of dynamic property PluginInfo_1_3::$request_time_elapsed is deprecated in /wp-content/plugins/user-role-editor-pro/pro/includes/plugin-update-checker.php on line 801
  • Fix: Content view restrictions add-on: Undefined array key 0 in user-role-editor-pro/pro/includes/classes/post-types-own-caps.php on line 93
  • Update: filter ‘ure_check_updates’ was added. It’s return true by default. Return false from it to switch off automatic checking if new version of URE is available. It would be useful if you use URE behind corporate firewall and it does not have access to the Internet.
  • Core version was updated to 4.64.1
  • Fix: Notice shown by PHP 8.3 is removed: PHP Deprecated: Creation of dynamic property URE_Editor::$hide_pro_banner is deprecated in /wp-content/plugins/user-role-editor/includes/classes/editor.php on line 166
  • Fix: Notice shown by PHP 8.3 is removed: PHP Deprecated: Creation of dynamic property URE_Role_View::$caps_to_remove is deprecated in /wp-content/plugins/user-role-editor/includes/classes/role-view.php on line 23
  • Fix: Notice shown by PHP 8.3 is removed: PHP Deprecated: Function utf8_decode() is deprecated in /wp-content/plugins/user-role-editor-pro/includes/classes/editor.php on line 984

[4.64] [08.08.2023]

Core version: 4.64

  • Fix: PHP Warning: Trying to access array offset on value of type bool in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/admin-menu-access.php on line 356.
  • Fix: PHP Warning: Undefined array key “message” in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/ajax-processor.php on line 228.
  • Update: Admin menu access add-on: Block “Sales Reports” menu automatically, if WooCommerce->Reports menu item is blocked.
  • Core version was updated to 4.64
  • Fix: Missed ‘message’ parameter was added to response for AJAX query. It fixed the potential PHP Warning: Undefined array key “message” in expressions like “strpos( $data[‘message’], …
  • Update: “Show capabilities in human readable form” checkbox switches between capability 2 text forms without full page reloading using JavaScript.

[4.63.5] [28.03.2023]

Core version: 4.63.3

  • Fix: Content view restrictions add-on: Now a CVR meta box is added to a term edit page after checking of ‘ure_content_view_access’ permission.
  • Update: Front-end menu view add-on: CSS was changed for URE controls
    to not overlap with other elements.
  • Core version was updated to 4.63.3
  • Fix: PHP version 8.2 showed warning: Creation of dynamic property User_Role_Editor::$settings_page_hook is deprecated : wp-content/plugins/user-role-editor/includes/classes/user-role-editor.php:603
  • Fix: PHP Fatal error: Uncaught TypeError: in_array(): Argument #2 ($haystack) must be of type array, int given in /www/wp-content/plugins/user-role-editor/includes/classes/view.php:81
  • Fix: PHP Parse error: syntax error, unexpected ‘:’, expecting ‘;’ or ‘{‘: wp-content/plugins/user-role-editor/includes/classes/base-lib.php on line 119, type declarations were removed for compatibility with older PHP versions.

[4.63.4] [16.12.2022]

Core version: 4.63.2

  • Update: array_merge() function is replaced with wrapper ure_array_merge(), to exclude fatal error: Argument #2 must be of type array.
  • Fix: Edit posts restrictions add-on:

    – Full list of posts was shown for user with “Own data only” turned ON in case user did not have any own post.
    – Full list of terms/categories was available at the post editor for selection for user with restricted access by terms/categories.
  • Fix: PHP Fatal error: Uncaught TypeError: array_key_exists(): Argument #2 ($array) must be of type array, null given in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/admin-menu-
    view.php:380
  • Fix: PHP Warning: Trying to access array offset on value of type bool in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/admin-menu-access.php on line 353
  • Core version was updated to 4.63.2
  • Update: symbols ‘{}$’ are removed from capability name before use it for internal purpose, to exclude cases like when one of plugins broke URE work adding capability like ‘edit_{$type}s’.
  • Update: array_merge() function is replaced with wrapper ure_array_merge(), to exclude fatal error: Argument #2 must be of type array.

[4.63.3] [03.11.2022]

Core version: 4.63.1

  • Update: Marked as compatible with WordPress version 6.1.
  • Fix: Navigation menu admin access add-on: Warning: Attempt to read property “slug” on int in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/nav-menus-admin-access.php on line 73

[4.63.2] [29.09.2022]

Core version: 4.63.1

  • Fix: Edit access restrictions add-on: Prohibit by selected posts ID list criteria worked incorrectly – all posts were prohibited instead of selected only.
  • Update: Edit access restrictions add-on: It skips Elementor’s internal custom post types to reduce general time execution.

[4.63.1] [21.09.2022]

Core version: 4.63.1

  • Marked as compatible with WordPress version 6.0.2
  • Fix: It was possible to open a post from a prohibited post type for editing via direct link by post ID, like /wp-admin/post.php?post=NN&action=edit
  • Update: Admin menu access add-on: URL Parameters White List: convert parameter name to lower case before processing.
  • Update: German translation was updated.
  • Core version was updated to 4.63.1
  • Fix: PHP Warning: Attempt to read property “ID” on null in ./includes/classes/user-role-editor.php on line 369
  • Fix: Deprecated: Automatic conversion of false to array is deprecated in ./includes/classes/base-lib.php on line 212

[4.63] [03.08.2022]

Core version: 4.63

  • Update: Marked as compatible with WordPress 6.0.1
  • New: Edit restrictions access add-on: It’s possible allow/prohibit for role or user the selected post types: posts, pages, custom post types.
  • Fix: Content view restrictions add-on: Fatal error: Uncaught InvalidArgumentException: target should be an object with map method or an array in /wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/fp/core/Fns.php:156
    URE tried to check if not logged-in user can edit the post, by its ID. This leaded to a problem inside WPML plugin code.
  • Fix: Content edit restrictions: “Force custom post types to use their own capabilities” option: URE automatically created custom post types unique capabilities later then “Fusion Builder” plugin did. ‘init’ action was replaced with ‘wp_loaded’ one.
  • Update: Content view restrictions add-on: restrictions are applied to the public custom post types only.
  • Update: Few notices (e.g. “Constant FILTER_SANITIZE_STRING is deprecated”) was fixed for better compatibility with PHP 8.1.
  • Core version was updated to version 4.63
  • New: It’s possible to translate custom role names using [PolyLang](https://wordpress.org/plugins/polylang/) plugin.
  • Update: URE does not sort roles in WordPress dropdown lists. In order to sort roles by name return ‘name’ from ‘ure_sort_wp_roles_list’ filter.
  • Update: User capabilities view page minor CSS enhancements.

[4.62.1] [29.03.2022]

Core version: 4.61.2

  • Update: Marked as compatible with WordPress 5.9.2
  • Fix: Gravity Forms edit access add-on:
    – Uncaught Error: Call to undefined method URE_GF_Access_User::get_fg_list() in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/gf-access-user.php:211
    – All Gravity Forms were available for the user in spite of the restrictions set for him

[4.62] [07.03.2022]

Core version: 4.61.2

  • Update: Marked as compatible with WordPress 5.9.1
  • New: It’s possible to import all user roles at once from previously exported CSV file.
  • New: “Edit posts restrictions” add-on: It’s possible to replicate settings from the main site to all other subsites of the multisite network (Network admin->Users->User Role Editor->Update Network).
  • Core version was updated to version 4.61.2
  • Fix: “Users->Add New” page – other selected roles were not saved.
  • Update: URE uses WordPress notification styles for own operation result output.

[4.61] [26.01.2022]

Core version: 4.61.1

  • Update: Marked as compatible with WordPress 5.9
  • Update: PHP 7.3 is marked as required.
  • New: Gravity Forms Edit Access add-on: It’s possible to set what forms is allowed to edit for the selected role.
  • New: Content view restrictions add-on: [user_role_editor] shortcode “roles” and “except_roles” attributes supports the “no_role” value for logged-in users with “No role for this site” – without any role granted.
  • Fix: Content view restrictions add-on: PHP Warning: A non-numeric value encountered in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/posts-view.php on line 224.
  • Fix: Meta boxes access add-on: PHP Warning: A non-numeric value encountered in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/meta-boxes.php on line 452.
  • Core version was updated to version 4.61.1
  • Update: If installed PHP/WordPress version is lower than required one, script termination ( wp_die() ) was replaced with notice-warning admin notice output.
  • Update: “Settings->User Role Editor->Tools->Reset” button is additionally protected from the unintended/accidental usage by text input field. Manual input of “Permanently delete all custom user roles and capabilities” text is required to enable the “Reset” button.
  • Update: Partial code review and refactoring according with WordPress & PHP coding standards.
  • Fix: “Users->selected user->Capabilities” page: ‘select all’ checkbox did not work.

[4.60.2] [21.09.2021]

Core version: 4.60.2

  • Update: Marked as compatible with WordPress 5.8.1
  • Fix: Admin menu access add-on: Blocked admin menu item “SEO->Workouts” (from Yoast SEO plugin) was still available as main menu item.
  • Fix: Multisite: Add-ons data from the main site were not replicated to subsites after click “Update Network” button from the “Network Admin->Users->User Role
    Editor”.
  • Fix: Navigation menus access add-on:
    – PHP Warning: Undefined variable $result in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/nav-menus-admin-controller.php on line 28
    – PHP Fatal error: Uncaught TypeError: Unsupported operand types: string + string in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/nav-menus-admin-view.php:146
  • Core version was updated to version 4.60.2.b1
  • New: URE user capability ‘ure_edit_gravityforms_access’ was added (for future use).
  • Fix: Multisite: URE_Editor::is_full_network_sync() returned FALSE, instead TRUE for the AJAX call, while call was made from the Network Admin (wp-admin/network/).

[4.60.1] [21.07.2021]

Core version: 4.60.1

  • Update: Marked as compatible with WordPress 5.8.
  • Fix: Edit restrictions add-on: If one of the pages on hierarchy tree was not published (draft) it may become unavailable for editing in spite of user can (is allowed) edit the parent page.
  • Core version was updated to version 4.60.1
  • Fix: PHP Notice: Undefined property: URE_User_View::$multisite in /wp-content/plugins/user-role-editor/includes/classes/user-view.php on line 145

[4.60] [28.06.2021]

Core version: 4.60

  • Fix: “Multisite: User lost granted roles after click “Users->Capabilities->Update Network”.
  • New: Edit posts/pages/custom post types restrictions add-on: new custom filters were added: ‘ure_post_edit_access_restricted_taxonomies’, ‘ure_post_edit_access_allowed_terms’, ‘ure_post_edit_access_terms_to_exclude’.
  • Update: Edit posts/pages/custom post types restrictions add-on:
    – It is compatible now with “Admin Columns” and “Advanced Custom Fields” plugins. “Admin columns” plugin did not showed “Advanced Custom Fields” managed column values, when URE applied edit restrictions. URE excludes now from edit restrictions ACF plugins custom post types ‘acf-field-group’ and ‘acf-field’.
    – It is compatible now with “Contact Form 7” plugin. You can restrict access to the CF7 plugin records the same way as to any other custom post type.
  • Core version was updated to version 4.60
  • New: Notification box was replaced with one based on the jpillora/nofifyjs jQuery plugin. It does not move down page content. It disappears automatically after 5 seconds. Click on it to remove it manually.
  • Fix: “Add capability” shows warning styled notification when needed (invalid characters, etc.) instead of a successful one.
  • Fix: Capabilities group uncheck and revert selection is blocked for the administrator role to exclude accident deletion of permissions from administrator role.

[4.59.4] [12.05.2021]

Core version: 4.59.1

  • New: Multisite: it’s possible to leave selected roles for selected subsites unchanged after “Update Network” applied. Add filter ‘ure_network_update_leave_roles’ and return from it the array like this one – array( (int) blog_id => array(‘role_id1’, ‘role_id2’, … );
  • Update: Posts/pages, custom post types edit restrictions add-on: child posts auto access takes into account all existing hierarchical post types, not only pages as earlier. Use ‘ure_auto_access_children_for_hierarchical_post_types’ filter in order to change this. It takes the single input parameter $hierarchical_post_types – the list of existing public hierarchical post types.
  • Core version was updated to version 4.59.1
  • New: Multisite: When update role at the main site with “Apply to all sites” option and PHP constant URE_MULTISITE_DIRECT_UPDATE === 1 (update roles directly in database, not via WordPress API), URE overwrites all subsite roles with roles from the main site. It’s possible now to leave selected role(s) for selected subsite(s) unchanged: add filter ‘ure_network_update_leave_roles’ and return from it the array like this one – array( (int) blog_id => array(‘role_id1’, ‘role_id2’, … );
  • Update: “Other roles” section is available now only for users with ‘promote_users’ capability.
  • Update: Notice at the top of URE page about action result is not removed automatically after 7 seconds as earlier.
  • Update: ‘ure_sort_wp_roles_list’ filter accepts these values for the single input parameter: false – leave roles list as it is; true or ‘id’ – sort roles list by role ID; ‘name’ – sort roles by role name in the alphabetical order.

[4.59.3] [07.04.2021]

Core version: 4.59

  • New: custom filter ‘ure_set_cpt_own_caps‘ was added. It takes 2 input parameters: $do_it (bool, TRUE by default) and $post_type (string). Return FALSE for this filter in order to leave the default capability type for selected custom post type when option “Force custom post types to use their own capabilities” is turned ON at URE’s options. If custom post type capabilities are not changed, related taxonomy capabilities are not changed too.
  • New: custom filter ‘ure_set_cpt_taxonomy_own_caps‘ was added. It takes 3 input parameters: $do_it (bool, TRUE by default), $taxonomy (string, like ‘product_cat’) and $post_type (string, like ‘product’). Return FALSE for this filter in order to leave the default capabilities for selected taxonomy even if related custom post type will get own capabilities when option “Force custom post types to use their own capabilities” is turned ON at URE’s options.
  • Update: PHP constant URE_WP_ADMIN_URL was replaced with direct ‘admin_url()’ call to respect the ‘admin_url’ filter applied at get_admin_url() function.
  • Core version was updated to 4.59
  • Update: Editing roles and capabilities granted to selected user (“Capabilities” link under user row at the “Users” list) executes ‘add_user_role’ or ‘remove_user_role’ actions only in case it really grants or revokes roles and/or capabilities.
    Previous versions fully revoked and granted again all roles during user permissions update even in case roles list was not changed. It was leaded to the false execution of the mentioned add/remove role actions.

[4.59.2] [02.03.2021]

Core version: 4.58.3

  • Fix: “Multisite -> Update Network” did not work due to bug in version 4.59.
  • Fix: Posts/pages, custom post types edit restrictions add-on:
    – Restricted user can some times see a full list of posts or pages due to internal caching issue.
    – Media Library restricted items list did not take into account authors ID list restriction criteria for images loaded directly to the Media Library, which does not have parent posts.
    – When products editing is restricted by product category/tag, product variations shown by “Admin Columns Pro – WooCommerce” plugin were not available. Now, if product is allowed, then related variations are allowed automatically too.
  • Update: Option “Force custom post types to use their own capabilities” replaces default capabilities for the custom taxonomies also. It takes the slug of the 1st post type associated with such taxonomy (e.g. ‘video’) and builds own capabilities this way: manage_terms->manage_video_terms, edit_terms->edit_video_terms, delete_terms->delete_video_terms, assign_terms->assign_video_terms. URE automatically adds such capabilities to the ‘administrator’ role. You have to grant these new capabilities to other roles manually.
  • Update: ‘edit_css’ capability is mapped to ‘unfiltered_html’ for WordPress multisite, in case ‘Enable “unfiltered_html” capability’ option is turned ON at the URE’s settings ‘Multisite’ tab. This automatically enables for a single site (blog/subsite) admin the ‘Additional CSS’ tab at the ‘Appearance->Customize’ page.
  • Update: Admin menu access add-on: New custom filter ‘ure_admin_menu_access_not_block_url‘ is available. It allows to whitelist not selected URL (without path, like admin.php?page=mlw_quiz_options), which is not presented at the admin menu and it’s not possible to select them with the “Block not Selected” model.
  • Core version was updated to 4.58.3
  • Update: URE automatically adds custom taxonomies capabilities to administrator role before opening “Users->User Role Editor” page.
  • Fix: Role changes were not saved with option “Confirm role update” switched off.

[4.59.1] [26.01.2021]

Core version: 4.58.2

  • Fix: Import single role: Uncaught TypeError: $ is not a function at HTMLDivElement.Import (import-single-role.js?ver=4.59:46) was fixed.

[4.59] [24.01.2021]

Core version: 4.58.2

  • Update: Admin menu access add-on: Update button saves changes via AJAX without full page reload.
  • Update: Nav menus admin access add-on: Update button saves changes via AJAX without full page reload.
  • Update: Widgets admin access add-on: Update button saves changes via AJAX without full page reload.
  • Update: All JavaScript files are loaded with URE plugin version number as a query string for cache busting purpose.
  • Fix: Widgets admin access add-on: “PHP Warning: A non-numeric value encountered in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/widgets-admin-view.php on line 189” was fixed.
  • Fix: “JQMIGRATE: jQuery.fn.click() event shorthand is deprecated” notice was fixed.
  • Fix: “JQMIGRATE: jQuery.fn.submit() event shorthand is deprecated” notice was fixed.
  • Core version was updated to 4.58.2
  • Update: Users->User Role Editor: Update button saves changes via AJAX without full page reload.
  • Fix: New user registered via frontend (wp-login.php?action=register) automatically receives additional (other) default role(s) according to selection made at User Role Editor settings “Other default roles” tab.
  • Fix: “JQMIGRATE: jquery.fn.resize() event shorthand is deprecated” notice was fixed.
  • Fix: “JQMIGRATE: Number-typed values are deprecated for jQuery.fn.css( (property name), value )” notice was fixed.

[4.58.2] [14.12.2020]

  • Core version 4.57.1
  • New: Admin menu access add-on: ‘ure_admin_menu_get_hashes’ custom filter was added (pro/includes/classes/admin_menu.php, line #105). URE uses internally the full list of the links included into admin menu. Use this filter to modify it, in case you know what you do.
  • New: German Formal (de_DE_formal) translation was added.
  • Fix: PHP Warning: The magic method __wakeup() must have public visibility. __wakeup() method was defined as private as a part of the Singleton design partern. Method was redefined as public but with exception inside to prevent its usage.
  • Update: jQuery [MultiSelect](http://multiple-select.wenzhixin.net.cn/) plugin was updated to version 1.5.2
  • Core version was updated to 4.57.1
  • Fix: Nextgen Gallery’s user capabilities were not shown as granted after current role change via roles selection dropdown list.

[4.58.1] [30.11.2020]

  • Core version: 4.57
  • Fix: Edit posts/pages access add-on: Error message was fixed: Uncaught Error: Object of class stdClass could not be converted to string in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/posts-edit-access-user.php:653

[4.58] [23.11.2020]

  • Core version 4.57
  • Update: Marked as compatible with WordPress 5.6.
  • Update: ” jQuery( document ).ready( handler ) ” was replaced globally with ” jQuery( handler ) ” for compatibility with [jQuery 3.0](https://api.jquery.com/ready/) and WordPress 5.6.
  • Update: Post edit access add-on:
    – Special support was added for the [FooGallery plugin](https://wordpress.org/plugins/foogallery/). Earlier new album, edit album pages showed full list of galleries in spite of the edit restrictions set by URE Pro. URE Pro uses ‘foogallery_album_exlcuded_galleries’ filter to fix this.
    – SQL queries are restricted by post type (if known) instead of scan full posts database table.
  • Core version was updated to 4.57:
  • Fix: “Grant Roles” button produced JavaScript error, if single user without any role granted (None) was selected.

[4.57.1] [07.09.2020]

  • Core version 4.56.1
  • New: WordPress multisite: “Network admin->User Role Editor->Update Network”:
    – ‘ure_after_network_roles_update’ action hook was added. It is executed after all roles were replicated from the main site to the all other subsites of the network.
    – ‘ure_after_network_addons_update’ action hook was added. It is executed after selected add-ons settings were replicated from the main site to the all other subsites of the network.
  • Core version was updated to 4.56.1:
  • New: WordPress multisite: Main site: Users->User Role Editor->Apply to All: ‘ure_after_network_roles_update’ action hook was added. It is executed after all roles were replicated from the main site to the all other subsites of the network.
  • Fix: “Granted Only” filter did not work at the “Users->User Role Editor” page.
  • Fix: Warning was fixed: wp-content/plugins/user-role-editor/js/ure.js: jQuery.fn.attr(‘checked’) might use property instead of attribute.

[4.57] [11.08.2020]

Core version: 4.56

  • Core version was updated to 4.56
  • New: Frond-end menu access add-on: default option “Show to” was extended to the selection between “Show to” and “Hide from” (If UI does not work as expected, force browser page refresh in order to load the latest version of front-end-menu-access.js).
  • Update: Admin menu access add-on: empty menu/submenu items are removed automatically.
  • Fix: Other roles access add-on: ‘+’ was replaced with ‘.’ in string concatenation expression.
  • Update: minor code updates/optimizations.
  • Core version was updated to 4.56:
  • New: User capabilities ‘install_languages’, ‘resume_plugins’, ‘resume_themes’, ‘view_site_health_checks’ were added to the list of supported WordPress built-in user capabilities.
  • Update: Single site WordPress installation: URE automatically grants all existing user capabilities to WordPress built-in ‘administrator’ role before opening its page “Users->User Role Editor”.
  • Fix: Extra slash was removed between URE_PLUGIN_URL and the image resource when outputting URE_PLUGIN_URL .’/images/ajax-loader.gif’ at ‘Users->User Role Editor’ page.
  • Info: Marked as compatible with WordPress 5.5.

[4.56.2] [06.06.2020]

Core version: 4.55.1

  • Core version was updated to 4.55.1
  • Security fix: User with ‘edit_users’ capability could assign to another user a role not included into the editable roles list. This fix is required to install ASAP for all sites which have user(s) with ‘edit_users’ capability granted not via ‘administrator’ role.
  • Update: URE_Uninstall class properties were made ‘protected’ to be accessible in URE_Uninstall_Pro class included into the Pro version.

[4.56.1] [05.06.2020]

Core version: 4.55

  • Fix: unfiltered_html enabled for multisite did not work when user saved content from Gutenberg. unfiltered_html activation code was not applied for WP REST API (AJAX) calls.
  • Update: Widgets admin access: It’s possible to use “Block not selected” access model to block widgets and sidebars which are not selected in the list.
  • Update: User Role Editor Pro uninstallation was refactored. It fully removes the (‘ure_%’) user capabilities from the user roles data and users meta.
  • Core version was updated to 4.55
  • Update: User Role Editor uninstallation was refactored. It fully removes the (‘ure_%’) user capabilities from the user roles data.

[4.56] [02.05.2020]

Core version: 4.54

  • Fix: Front-end menu access add-on:
    – Do not switch menu walker to custom one starting from WordPress version 5.4 as it natively supports ‘wp_nav_menu_item_custom_fields’ action.

    – Do not duplicate UI elements output in case ‘wp_nav_menu_item_custom_fields’ action is executed more than one time – (for example, by external code incompatible with WordPress 5.4).
  • Core version was updated to 4.54:
  • New: Quick filter hides capabilities, which do not contain search string.
  • Update: CSS enhancement: When site has many custom post types capabilities list section maximal height is limited by real height of the left side (capabilities groups) section, not by 720px as earlier.
  • Fix: Empty list of capabilities (0/0) was shown for custom post types (CPT) which are defined with the same capability type as another CPT.
    For example courses CPT from LearnDash plugin is defined with ‘course’ capability type (edit_courses, etc.) and other CPT from LearnDash were shown with 0/0 capabilities (lessons, topics, quizzes, certificates).

[4.55.2] [30.03.2020]

Core version: 4.53.1

  • Fix: bbPress roles UI elements, like “Forum role”, “Change forum role to…” were empty due to fix made with version 44.55.1.

[4.55.1] [28.03.2020]

Core version: 4.53.1

  • New: Content view access add-on:
    – ‘ure_content_view_access_data_for_role’ custom filter was added. It takes 2 parameters: 1st – array with content view access data defined for a role, $role_id – role ID, for which content view access data is filtered.
    – ‘ure_content_view_access_data_for_user’ custom filter was added. It takes 2 parameters: 1st – array with content view access data defined for a user, $user_id – user ID, for which content view access data is filtered.
  • New: Front-end menu access add-on: ‘ure_show_front_end_menu_item’ custom filter was added. It takes 3 parameters: 1st – logical, if TRUE – show menu item, 2nd – nav_menu_item data structure with checked menu item, 3rd – URE restriction data for menu item. Return false to hide menu item from current user.
  • Fix: Excluded using $this in a static method URE_Admin_Menu_Hashes::require_data_conversion(), line #179.
  • Fix: Excluded using $this in a static method URE_Network_Addons_Data_Replicator::get_for_new_blog(), lines #172, #200.
  • Core version was updated to 4.53.1:
  • Fix: Undefined variable: message at wp-content/plugins/user-role-editor/includes/classes/editor.php:898
  • Update: Few English grammar enhancements.

[4.55] [03.02.2020]

Core version: 4.53

  • New: custom filter ‘ure_hide_fe_menu_if_content_view_prohibited’ allows to not hide front-end menu item, if linked page is prohibited for view to current user.
  • Update: Other roles access add-on: It’s possible to use this add-on against ‘administrator’ role under WordPress multisite. Return FALSE from ‘ure_not_block_other_roles_for_local_admin’ filter for this purpose.
  • Fix: Other roles access add-on:
    – Users with blocked role(s) were shown for “Block not selected” model.
    – Users quantity at the top roles links/filters were counted wrong way.
  • Core version was updated to 4.53:
  • Update: “Add role”, “Delete role”, “Rename role”, “Add capability”, “Delete capability” do not reload full page on completion, but use AJAX for data exchange with server and refresh parts of the page via JavaScript.
  • Update: Multisite: “Allow non super administrators to create, edit, and delete users” option: priority for ‘map_meta_cap’ filter priority was raised from 1 to 99, in order make possible to overwrite changes made by other plugins, like WooCommerce.
  • Fix: Some English grammar mistakes.

[4.54.1] [27.12.2019]

Core version: 4.52.2

  • New: Other roles access add-on: Use custom ‘ure_other_roles_access’ filter to change restrictions for user dynamically. Filter takes 2 input parameters: 1) $blocked (array) – restrictions for current user; 2) $user (WP_User) – current user.
  • Fix: Other roles access add-on:
    – It was not possible to edit user from the users list, when “Not selected” model is turned ON.
    – There was a bug in processing roles with similar role IDs, like ‘customer’, ‘wholesaler_customer’. When you blocked ‘customer’ role, script automatically blocked similar role ‘wholesaler_customer’.
  • Core version was updated to 4.52.2
  • Fix: Custom capabilities for custom post types was not created by URE automatically since version 4.52.1.
  • Fix: ‘administrator’ role protection did not show to power users roles with ‘administrator’ word inside, like ‘shop_administrator’, etc.

[4.54] [25.11.2019]

Core version: 4.52.1

  • New: Multisite: “Network Admin->Users->User Role Editor->Network Update” URE Pro uses by default the main blog as a source of add-ons settings to replicate for all network. New custom filter ‘ure_get_addons_source_blog’ allows to use as a source blog any other existing subsite. Filter accepts single parameter – main blog ID by default. User this filter to return ID of blog/subsite which you wish to use as a source of add-ons settings for all other subsites.
  • Fix: PHP Notice: Undefined variable: post_id in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/content-view-restrictions-editor.php on line 150

[4.53] [14.11.2019]

Core version: 4.52.1

  • New: Front-end menus admin access add-on: Block access to the front-end (navigation) menus under “Appearance->Menu” for selected role.
  • Core version was updated to 4.52.1
  • Update: URE requires PHP version 5.6.
  • Update: ure_cpt_editor_roles filter was added. It takes 2 parameters: array $roles with 1 element ‘administrator’ by default and $post_type with post type name string. Add other role(s) to which you wish automatically add all user capabilities for custom post type $post_type. URE updates roles this way before opening “Users->User Role Editor” page.
  • Update: New own URE Pro user capability ‘ure_nav_menus_access’ was added. It allows to manage what front-end menus will be available for selected role.

[4.52] [03.10.2019]

Core version: 4.51.3

  • New: Content View Restrictions add-on: It’s possible to add view restrictions directly to post categories or any other custom taxonomies.
  • Update: Meta boxes access add-on: It’s possible to block/hide “Page Attributes” Gutenberg sidebar component blocking “Page”->”Page Attributes” meta box.
  • Fix: Content view restrictions add-on: Redirection from not available for view front/home page works as expected (“Page not found” error message was shown earlier).
  • Fix: Admin menu access add-on: When menu link is the same as the link of the single unblocked submenu item (all the rest items of the same submenu were blocked), menu link was removed as a blocked one.
  • Fix: Export single role: Exported file may lose 1-2 last characters and get wrong extension (.pdf in addion to expected .dat). Content type header was replaced with ‘application/octet-stream’;
  • Fix: Import single role: Error processing was enhanced for the cases of incorrect JSON data input. URE shows error message now instead of page reload in silence.
  • Fix: Settings->User Role Editor->Multisite->Activate access restrictions to User Role Editor for single site administrator: after turning ON this option URE produced PHP fatal error: Uncaught Error: Call to undefined method URE_Lib_Pro::filter_existing_caps_input() in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/settings-pro.php on line 192
Pages: 1 2 3 4