Blocking access to menu options

Hi @thecreator01

I hope you are doing well today.

Branda -> Admin Area -> Admin Menu allows to use two types of blocking access: Hide but allow access or Hide and disable access.

In your scenario, it seems you have used hidden (eye icon) which only hides items, but allows you to access URLs when a person knows that URL (for example from another site, even own one when someone can test that Woocommerce URL structure).

You need to use the Hide and disable access feature(padlock icon) to fully block access there – https://wpmudev.com/docs/wpmu-dev-plugins/branda/#configure-menu-items

Hide but allow access – Hides the item in the admin menu, but allows direct access if the URL is known. When set, an Unhide option will appear on the menu item instead.

Hide and disable access – Hides the item in the admin menu and prevents direct access if the URL is known. When set, an Unhide option will appear on the menu item instead.

Kind Regards,
Kris

Hello, thank you for your response. @wpmudevsupport13

I already did this. (See screenshot.) and woocommerce status page is blocked. (..wp-admin/admin.php?page=wc-status)
No problem here.

https://prnt.sc/mtjFCtaFl3jv

However, tab links that work with the wc-status connection are still accessible. (..wp-admin/admin.php?page=wc-status&tab=status)
This link works with wc-status and the expected behavior is that the “&tab=status” link is also blocked.

Hi @thecreator01

Thank you for additional explanation.

I tested it and I can see what you mean. I can confirm the issue.

Unfortunately, I wasn’t able to find any workaround or “quick fix” fort hat currently.

I have already reported it to our Branda Team as a bug so developers will look into it and hopefully they’ll be able to include fix for this in one of future releases (though I’m not able to provide an ETA at the moment).

Kind regards,
Adam

Hello, thank you for verifying the issue. @wpmudev-support8

For example, I think the same problem applies to Woocommerce’s extensions page. Perhaps we may encounter the same problems in many other plugins.

I hope this issue will be fixed in the next update. Because it is a really important problem.

Hi @thecreator01,

Until a fix is implemented, you can try this snippet to remove the menu:

<?php

function wpmudev_hide_woocommerce_status_tabs() {
	$user = wp_get_current_user();
	if ( in_array( 'administrator', $user->roles, true ) || in_array( 'editor', $user->roles, true ) ) { // Please change the user roles.
		remove_submenu_page( 'woocommerce', 'wc-status' ); // Removes Status page and tabs access.
	}
}
add_action( 'admin_menu', 'wpmudev_hide_woocommerce_status_tabs', 100 );

You can implement the above code using mu-plugins. Please check this link on how to implement the above code as a mu-plugins:
https://wpmudev.com/docs/using-wordpress/installing-wordpress-plugins/#installing-mu-plugins

Kind Regards,

Nithin

Hello, thank you for your help. @wpmudevsupport11

I implemented this code with mu-plugin but there was no change.

Hello again and sorry for the confusion. @wpmudevsupport11

I realized I didn’t implement the code correctly and now it works.

Thank you very much for your help.

Additionally, I would like to report one more problem. Even though we set the Woocommerce extensions option to hidden by blocking access with a branda, it can still be accessed via the direct link.

“admin.php?page=wc-admin&path=%2Fextensions”

I also faced the same issue in woocommerce “Home” option.

and marketing page (admin.php?page=wc-admin&path=%2Fmarketing)

• This reply was modified 4 months, 2 weeks ago by thecreator01.
• This reply was modified 4 months, 2 weeks ago by thecreator01.
• This reply was modified 4 months, 2 weeks ago by thecreator01.

Hi @thecreator01,

Thank you for providing us with the additional information. We have updated the bug report accordingly. A solution for this issue is anticipated to be included in one of our upcoming updates. Please monitor the plugin change log for further details and updates.

Kind Regards,
Nebu John

Thank you very much for your help @wpmudevsupport14

Hi @thecreator01 ,

As explained by Nebu, please keep an eye on the plugin Chagelog.

I’ll go and mark this thread as resolved. Note that you can still reply on this topic.

If you have any additional questions or require further help, please let us know!

Best regards,
Laura