Easy but not secure

  • I love the way the plugin is set-up and integrated in WordPress.
    However, to make it secure the authorizations should also be checked at the runtime of every page. Right now, if you know the exact url, you can still access the pages you want to visit.

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Author HelgaTheViking

    (@helgatheviking)

    You are aware that Nav Menu Roles is not a membership plugin, right? Nav Menu Roles controls whether an item appears in the menu. That is all. My plugin does not control access to pages and I never made any pretense that it does. Nor should it, as there are myriads of membership plugins that already do this.

    Thread Starter XXLnote

    (@xxlnote)

    I know you didn’t mention that, but I was hoping for that functionality. And I got the idea that this information is useful to many. I need both menu adaptation and authorization checks in every page. Do you have recommendations for that?

    Thanks.

    Plugin Author HelgaTheViking

    (@helgatheviking)

    If you want both then you need Nav Menu Roles plus a membership plugin of your choice. Justin Tadlock’s Members is a solid, free choice, but there are so many out there.

    I hope you will consider revising your rating to reflect the plugin’s performance against more realistic expectations. Giving a mediocre rating because it isn’t a membership plugin when it isn’t supposed to be a membership plugin isn’t exactly a fair review.

    Thanks!

    I just wanted to point out that the three-star rating above doesn’t reflect how good/bad this plugin is. The review is based off a feature that really has nothing to do with this plugin. I hope the reviewer updates this review to reflect his opinion of how the plugin handles the features that the plugin says it handles.

    Plugin Author HelgaTheViking

    (@helgatheviking)

    Thanks for the support Justin!

    Got to say I agree with XXLNote, it is important to know the limitations of a plugin. In this case a user could easily assume that a hidden menu means that the page is inaccessible. Nothing to do with membership systems, just an understanding of what a hidden menu confers on the site.

    I’ve used a CMS, Website Baker, where pages can be restricted to users/roles and the menu is built from the accessibility of the user to the pages. It surprised me that WP didn’t work the same way.

    Having said that I’m grateful that you have made this plugin, thanks!

    Plugin Author HelgaTheViking

    (@helgatheviking)

    @PurpleEdge- It is one thing to know the limitations of a plugin and entirely another thing to give a mediocre rating of a plugin based on a feature that a plugin isn’t supposed to have (or to give a mediocre rating based on a misunderstanding of how WordPress works).

    Menu items are entirely separate entities from pages in WordPress. If you want/need to restrict both, then you need NMR plus a membership plugin.

    This plugin does one thing and it does it very well. I agree the review should be updated to reflect that fact.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Easy but not secure’ is closed to new replies.