Exclude users from logging in as higher roles?

  • Resolved Andrew Wilder

    (@eatingrules)


    1 year, 9 months ago

    We use WooCommerce, and I need to give an employee the ability to log in as Customers — but I don’t want them to be able to log in as users with a higher privilege, like Editors.

    I’ve granted them access to List Users and Edit Users (following this tutorial)… so they can now Login as User. But that lets them log in as any user, which effectively gives them Editor (or maybe even Admin) permissions.

    How can I exclude them from being able to log in to specific accounts, or those with a higher privilege than theirs? I’d be fine with excluding specific accounts by ID (rather than by role), if necessary.

    Thanks!

Viewing 1 replies (of 1 total)
  • Thread Starter Andrew Wilder

    (@eatingrules)

    Ah, I just saw this older thread Editors can login as Admin which says “You cannot log in as an Admin, because Admins have higher privileges than Editors.”

    I do see that my employee cannot log in as an Admin, but they can log in as an Editor. I’m guessing that’s because I had to give them some additional privileges in order to be able to process/edit orders.

    So maybe a snippet to exclude the ability to log in as specific users, by user ID, would be a quick fix here?

    Here are the permissions my employee’s account currently has:

    edit_others_shop_coupons
    edit_others_shop_orders
    edit_private_products
    edit_private_shop_coupons
    edit_private_shop_orders
    edit_product
    edit_published_shop_coupons
    edit_published_shop_orders
    edit_shop_coupon
    edit_shop_coupons
    edit_shop_order
    edit_shop_orders
    edit_users
    list_users
    manage_woocommerce_coupons
    manage_woocommerce_orders
    publish_shop_coupons
    publish_shop_orders
    read
    read_private_pages
    read_private_posts
    read_private_products
    read_private_shop_coupons
    read_private_shop_orders
    read_product
    read_shop_coupon
    read_shop_order
    view_admin_dashboard
Viewing 1 replies (of 1 total)
  • The topic ‘Exclude users from logging in as higher roles?’ is closed to new replies.