jroumagnac

Great Job Vasyl, it’s working!
Very appreciated, thank you for your support.

Thank you Vasyl, that’s appreciated.

Thank you Vasyl.

Hello,

did you had a chance to look at it ?

thank you

I can give you access (private message) to my WordPress installation if you want to have a look… maybe it can help

I tried this on 3 different servers (Windows & Unix) and on differents versions of PHP (5.6 & 7) , the result is always the same…

Thank you

Hello Noel,

Thank you for your quick answer.

I just installed a fresh 4.9.8 WordPress on one of my servers this morning to test in a clean context.
No plugin at all except AAM + Plus Package, default theme … just a raw English WordPress.

Here is what I did :

1. I created 2 posts categories : Fruits and Vegetables
2. I created 6 posts : Strawberry, Apple, Orange associated with the Fruits category / Potato, Carrot, Broccoli associated with the Vegetables category
3. I created 2 new Roles fruits-sub and vegetables-sub based on the subscriber role.
4. I created 2 users fruituser (linked with fruits-sub role) and vegetableuser (linked with vegetables-sub role)

So you can see that it is a very basic context.

My goal is to disallow(LIST and READ) the Fruits category (and its content) to any user under the vegetables-sub role, and vice-versa, to disallow the Vegetables category (and its content) to any user under the fruits-sub role.

To do that, I went into AAM settings :

1. Manage Role vegetable-sub > Post & Terms > Posts > Manage Access to the Fruits category >

• Checked : Frontend Access To This Term > BROWSE
• Checked : Frontend Access To This Term > LIST
• Checked : Frontend Access To All Child Posts > LIST
• Checked : Frontend Access To All Child Posts > READ

• Manage Role fruits-sub > Post & Terms > Posts > Manage Access to the Vegetables category >

• Checked : Frontend Access To This Term > BROWSE
• Checked : Frontend Access To This Term > LIST
• Checked : Frontend Access To All Child Posts > LIST
• Checked : Frontend Access To All Child Posts > READ

Finally I tested :

1. Logged in as fruituser : All seems OK, only posts of the Fruits category are shown in search results , lists, by author or recent posts.
2. Logged in as vegatableuser : All seems OK too, only posts of the Vegetables category are shown in search results , lists, by author or recent posts.

Now, here is the weird behavior :

1. If I add a simple “good” tag on the Potato post and I log-in as the fruituser : “access is denied”, I can’t even see the homepage!
2. If I remove the “good” tag from the Potato post all is back to normal

Another one with the other user (the result is strangely different) :

1. If I add a simple “good” tag on the Strawberry post and I log-in as the vegetableuser : access is not denied! But, I can see the Strawberry post appearing in every lists (search results , lists, by author or recent posts) though It shouldn’t be listed since I denied its category Fruits for any user having the vegetable-sub role
2. If I remove the “good” tag from the Strawberry post all is back to normal

So my conclusion is that there is an unwanted impact by adding tags to post.
Or perhaps did I miss or misunderstood something ?

Thank you for your help !

Oups, sorry for the bad formatting … posting it again

<p>Hello Noel,<br />
<br />
Thank you for your quick answer.<br />
<br />
I just installed a fresh 4.9.8 WordPress on one of my servers this morning to test in a clean context.<br />
No plugin at all except AAM + Plus Package, default theme … just a raw English WordPress.<br />
<br />
Here is what I did :</p>

1. I created 2 posts categories : <b>Fruits </b>and <b>Vegetables</b>
2. I created 6 posts : <b>Strawberry</b>, <b>Apple</b>, <b>Orange </b>associated with the<b> Fruits category</b> / <b>Potato</b>, <b>Carrot</b>, <b>Broccoli </b>associated with the <b>Vegetables </b>category
3. I created 2 new Roles <b>fruits-sub</b> and <b>vegetables-sub</b> based on the subscriber role.
4. I created 2 users <b>fruituser </b>(linked with <b>fruits-sub </b>role) and <b>vegetableuser </b>(linked with <b>vegetables-sub</b> role)

<p>So you can see that it is a very basic context.</p>
<p>My goal is to <b><span style=”color: #cc0000;”>disallow </span></b>(LIST and READ) the <b>Fruits</b> category (and its content) to any user under the <b>vegetables-sub</b> role, and vice-versa, to <b><span style=”color: #cc0000;”>disallow</span></b> the <b>Vegetables</b> category (and its content) to any user under the <b>fruits-sub</b> role.</p>
<p>To do that, I went into AAM settings :</p>

1. Manage Role <b>vegetable-sub</b> > <b>Post & Terms</b> > <b>Posts </b>> Manage Access to the <b>Fruits</b> category > <br />

• Checked : Frontend Access To This Term > BROWSE
• Checked : Frontend Access To This Term > LIST
• Checked : Frontend Access To All Child Posts > LIST
• Checked : Frontend Access To All Child Posts > READ

• Manage Role <b>fruits-sub</b> > <b>Post & Terms</b> > <b>Posts </b>> Manage Access to the <b>Vegetables</b> category > <br />

• Checked : Frontend Access To This Term > BROWSE
• Checked : Frontend Access To This Term > LIST
• Checked : Frontend Access To All Child Posts > LIST
• Checked : Frontend Access To All Child Posts > READ

<p>Finally I tested :</p>

1. Logged in as <b>fruituser </b>: All seems OK, only posts of the <b>Fruits</b> category are shown in search results , lists, by author or recent posts.
2. Logged in as <b>vegatableuser </b>: All seems OK too, only posts of the <b>Vegetables</b> category are shown in search results , lists, by author or recent posts.

<p>Now, here is the weird behavior :</p>

1. If I add a simple <b>”good” tag </b>on the <b>Potato </b>post and I log-in as the <b>fruituser </b>: “access is denied”, I can’t even see the homepage!
2. If I remove the <b>”good” tag</b> from the <b>Potato </b>post all is back to normal

<p>Another one with the other user (the result is strangely different) :</p>

1. If I add a simple <b>”good” tag</b> on the <b>Strawberry </b>post and I log-in as the <b>vegetableuser </b>: access is not denied! But, I can see the Strawberry post appearing in every lists (search results , lists, by author or recent posts) though It shouldn’t be listed since I denied its category <b>Fruits </b>for any user having the <b>vegetable-sub</b> role
2. If I remove the <b>”good” tag</b> from the <b>Strawberry</b> post all is back to normal

<p>So my conclusion is that there is an unwanted impact by adding tags to post.<br />
Or perhaps did I miss or misunderstood something ?</p>
<p>Thank you for your help !</p>