Combining Authors and Capabilities Plugin

  • Resolved roverlap

    (@roverlap)


    9 months, 3 weeks ago

    Hi,

    I created a Role that can edit and create pages or other posttypes (but not the pages of other users, only ones where your user is added as author). So a user with that role should be able to edit any page they created.
    Now I also use your Authors Plugin because I need more than 1 user with that role to work on the same pages.
    But that doesn’t seem work.

    If User 1 creates a page, they can edit it. User 2 with the same role cannot -> (ok)

    Now an admin assigns User 2 so they can both edit that page (draft). -> ok

    Now both can see the page as clickable in the overview. Only User 1 can actually edit it though. User 2 gets a white screen. (403 Rest Forbidden)

    That page then gets published by an admin. Now User 1 also cannot edit the page anymore (I assume because the post_author switched to the admin)

    Is there any way with Publishpress Capabilities and Authors together to allow me to have roles than can only create and edit pages where they’re assigned as authors and can’t publish them?

    thanks

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support Riza Maulana Ardiyanto

    (@rizaardiyanto)

    Hi @roverlap

    Thank you for using our plugins.

    Enabling this functionality requires granting the user the ‘edit_others’ capability. However, it’s important to note that this action will also grant the user visibility into other users’ posts.

    Thanks,

    Thread Starter roverlap

    (@roverlap)

    Ok, setting edit_others fixes the white screen.
    But as soon as an admin publishes a page, none of the attached authors can open the page.
    So that can’t be changed without giving people edit_published? ( which then allows you access to every page because edit_others is active).

    So Authors doesn’t really work together Capabilities.

    So basically I’d have to give them every permission to open and see everything and then filter out the ones I don’t want them to see myself on the overview and somehow redirect them from the edit page if they access one they aren’t allowed to via a link.

    Or am I misunderstanding?

    Plugin Support Riza Maulana Ardiyanto

    (@rizaardiyanto)

    @roverlap Can you please try add “edit_published” and revoke “edit_others”?

    Does it works as expected?

    Thanks,

    Thread Starter roverlap

    (@roverlap)

    now User 1 (created the page initially) can edit the page again, but User 2 (added via Authors) can’t. No difference if I “X” edit_other or just leave it empty

    thanks

    Plugin Author Kevin Behrens

    (@kevinb)

    @roverlap I talked this over with @rizaardiyanto, and we have a workaround for you to try while we adjust some of the access control code in the Authors plugin.

    1. In Authors > Settings > Advanced, tick the checkbox “Remove single author map restriction”, then click “Save Changes”

    If you would also like to return your role capabilities to the previous settings (edit capability without edit_published), another workaround step is needed for now:

    2. Activate the PublishPress Permissions plugin (until this issue is resolved by a future PublishPress Authors release)

    3. In Authors > Settings, you should see a message “PublishPress Authors needs a database update for Permissions integration. Click to run the update now.” Go ahead and click that.

    The only other configuration step is to ensure that Permissions > Settings > Modules > Collaborative Publishing is enabled (which is the default).

    Thread Starter roverlap

    (@roverlap)

    ok I think I have it as I want now. Still need to do additional testing.

    In addition to the steps above (first step didn’t do anything, trying to assign a guest user to a wordpress User results in “Error updating author profile.“), I had to not grant edit_other but grant edit_published.

    Before that I only saw pending or draft pages, nothing else. (with edit_other granted but not edit_published)

    After that I now see all pages with User 1 and User 2 but only the one where the user is assigned, is actually clickable. I think I can live with that, I’ll just filter out the rest somehow.

    thanks

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Combining Authors and Capabilities Plugin’ is closed to new replies.