can i limit editing specific custom fields to certain roles?

Question

i am writing a plugin that injects unescaped content (including javascript) into a post. i'm storing this content as a custom field, and am wondering if there are any built in ways to prevent users from editing specific custom fields.

Answer 1

Simply use a Custom Field with its name starting with an underscore, so it won't show up in the CF meta box, eg, _field_name instead of field_name.

It will be hidden for all roles, but if you are manipulating its value only through code, then no problem.

If you need to manipulate the value on the edit screen, then you'll need a Custom Meta Box and control its appearance according to the user role.

[ update: looks like this kind of field can only be entered dynamically, it dumps an error if you try in the admin interface ]

Answer 2

Without code, it is hard to give you anything specific. A lot depends on what you are doing and where you need to do it.

In addition to what brasofilo suggested, you can always wrap individual blocks of code with current_user_can. For example...

if (current_user_can('administrator')) {
  echo "You are awesome";
} else {
  echo "Ha! Ha! You can't do stuff";
}

Note: the Codex page for current_user_can warns against using a role name, but the source documentation states "@param string $capability Capability or role name". I do not know why they differ and I have never had a problem with a role name, but be aware.