Individual passwords per user to stop them editing other users posts

  • Hi guys,

    I have tried many role permission plugins and none are working as I need. I have a website with about a dozen users – all of which I only want to be able to edit their specific page.

    All of the plugins I have tried allow you to categorize a user and allow them to either make page posts or not – nothing about specific pages.

    Essentially all I need is that when a user attempts to edit a post (or page) – they are asked for a unique password. If they know the password they can edit – if they do not they can’t.

    This way – I can control say User A permissions by giving them only the extra password which corresponds to their area. If they try to edit any of User B’s posts – they will not know the password and cannot.

    Is there a plugin available which covers this? Or a hack?

Viewing 1 replies (of 1 total)
  • Moderator bcworkz

    (@bcworkz)

    In other words each individual post needs its own unique password in order to edit it, right?

    I hope you don’t have a lot of posts that need passwords. Some blogs have many thousands of posts, I can’t imagine managing that many passwords! Because of that, I’d be surprised if there’s a plugin that does this, but you never know…

    It’s certainly something that could be developed, but there’s no easy hack like hook this filter and return true and everything works the way you want. I may be wrong, but this sounds like it could turn into quite a little development project.

    I would start with a custom post type for password protected posts. A hash of the password can be stored in postmeta. You’d need to add a column to the list table for admins to manage the passwords.

    There’s a lot of possibilities for possible approaches for prompting for passwords and limiting access to edit forms. I’m not sure exactly what would work, some investigation is required. Something will work.

    I would also install a backup routine hooked into ‘save_post’ just in case someone managed to access an edit form without a password.

Viewing 1 replies (of 1 total)
  • The topic ‘Individual passwords per user to stop them editing other users posts’ is closed to new replies.