Permissions Bug

  • Plugin permissions are behaving more like capabilities are cumulative, not or.

    Under Settings -> Permissions, if I set to “Authors and above”, I also have to give the manage_options capability to the role or user using a plugin like User Role Editor, in order for the user/role to have access to the weight tracker user data and settings pages. If I change the permissions level to “Editors and above”, access goes away for Authors. If I change the user role to Editor, access is restored, as long as manage_option capability is also set for the user or role.

    I also noticed that sometimes the settings pages would load correctly, but the main user data page would have a user permission error and not load. Since this is the page I was primarily testing, I didn’t further diagnose why the sub pages would load when the main page didn’t.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author YeKen

    (@aliakro)

    Hi there,

    Sorry for the delay replying… Currently the permissions are set up as:

    manage_options – Administrators Only
    read_private_posts – Editors and above
    publish_posts – Authors and above

    If you set it to “Authors and Above” then I’d expect the role should only need the capability of “publish_posts”?

    Al

    Thread Starter nonprofitweb

    (@nonprofitweb)

    Sorry, my turn for the delay in replying.

    The behavior you describe is what I was expecting to. I just retested, and with the permissions set to “Editors and above” a user with “Editor” role is unable to access any Weight Tracker pages. Likwise with permissions set to “Authors and above”, an editor is unable to access the Weight Tracker user data pages.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Permissions Bug’ is closed to new replies.