What user permissions are needed to view Messages

Event Manager has built in user role of ‘Event Manager’ you can use this to view and manage events.

Ooops I answered fro a different plugin!!

I need to check the contact form plugin, but I dont think that there is a view only permission possible.

Yes currently ‘manage_option’ capability to see / manage the messages which is a bit too powerful ( admin)

It would make sense to allow the message page to be ‘edit_posts’ which would include Contributors.

I’ll add that to the development list.

meanwhile you can edit

wp-content/plugins/quick-contact-form/legacy/settings.php

find

function qcf_admin_pages()
{
    $qcf_setup = qcf_get_stored_setup();
    if ( !$qcf_setup['nostore'] ) {
        add_menu_page(
            'Messages',
            'Messages',
            'manage_options',
            'quick-contact-form-messages',
            function () {
            require_once 'messages.php';
        },
            'dashicons-email-alt'
        );
    }
}

and change manage_options toedit_posts

(what I’m thinking – is to allow flexibility I will add an option that the admin can decide what user role can mange messages, or maybe create a capability of manage_messages, thoughts? )

• This reply was modified 1 year, 1 month ago by Alan Fuller.

Thanks for your swift and thoughtful response.

It doesn’t need to be view only. It makes sense that an employee managing messages would be able to delete messages, delete selected, send the message list, and export to CSV. And BTW, if it were possible to add the timestamp of the message to the date, that would be very helpful. Being able to send a selected message or messages to the entered email address would also be a very handy feature, allowing the employee to redirect messages directly from WordPress. An employee probably shouldn’t be able to upgrade, however. That is something that would more usually be managed by a site admin.

In many businesses, the employee who manages contact form messages is of relatively low authority in the company, and is not otherwise involved with the website (nor authorized to make purchases). The Contributor role isn’t a perfect fit for this scenario, as it permits access to some other things which would be better restricted to site admins.

Therefore a unique user role specific to your plugin, similar to your Event Manager screenshot, would probably be a better solution for typical business use than piggybacking on a native WordPress role. It would also be useful for site admins of blogs configuring safe permissions for an inexperienced site owner.

Yes that makes sense ‘Message Manger’ role – but would you give the ‘Message Manager’ also permission to change form settings etc or just give the setup control to Admins ( as it is today )?

I’d keep it with admins. Contact form setup is not for beginners.