• Resolved BigJazzz

    (@jpearson)


    The quotes/invoices aren’t restricted to just the person they’re assigned to (and admin/shop managers, for QA purposes). Anyone with the link can access it, even if they’re not logged in.

    I understand there’s a plugin for a secured hash, but to be perfectly honest this is something that seems fundamental to invoicing software with a client are.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author SlicedInvoices

    (@slicedinvoices)

    There are many ways to restrict access. We have found a lot of people already have other access-restricting plugins in place (for example, membership plugins like s2Member or Memberpress), so with Sliced Invoices we don’t automatically impose our own access restrictions out of the box… we leave the choice up to you. We have our Secure Invoices paid extension you referenced which is one option, but this is not the only choice. You could also do any of the following:

    1) Use the built-in WordPress password feature. WordPress allows you to protect posts/pages with a password. We support the same feature for Quotes and Invoices. You can set a password in the Quick Edit menu for any quote or invoice.

    2) You can also go into the Quick Edit menu and mark it as “private”.

    or

    3) Use one of the many WP plugins out there that deal with restricting content and/or defining access based on rules. (s2Member, Memberpress, Restrict Content Pro, and probably dozens of others)

    Hope that helps…

    Regards,
    David

    Thread Starter BigJazzz

    (@jpearson)

    I’ll have a look at this.

    Thread Starter BigJazzz

    (@jpearson)

    One other question: how would I restrict access though? There’s no page titled “sliced_quote” or “sliced_invoice”, so I’m not able to select those for lockdown.

    Thread Starter BigJazzz

    (@jpearson)

    I’ve tried the “Private” path, and it’s hiding the pages correctly from non-logged in users.

    However, it’s not showing in the client area. (I have a test login for this.)

    1501858718.png

    1501858755.png

    Plugin Author SlicedInvoices

    (@slicedinvoices)

    “sliced_quote” and “sliced_invoice” are custom post types (not pages). So you would need to restrict access to those CPTs.

    I think by default the Private setting in WordPress limits the access to just yourself and any admins. I haven’t tested it but you could perhaps try something like this if you want to allow logged-in users access: https://gist.github.com/guillermorangel/6525209.

    Thread Starter BigJazzz

    (@jpearson)

    Yeah, that’s what I tried. It definitely worked, as the logged-in users could visit with the direct link. The problem is it hides it from the Client Area though, so they can’t view them all together.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Restricting access to quote/invoice’ is closed to new replies.