WordPress uses a concept of Roles, designed to give the site owner the ability to control what users can and cannot do within the site. Each role is allowed to perform a set of tasks called Capabilities.

learn more… | top users | synonyms (1)

0
votes
1answer
39 views

Changing capability type without altering plugin

This is probably easy but if someone could help me that would be great: I'm planning on using the "Reusable Text Blocks" plugin on several Wordpress sites. I'm going to use this on sites that only ...
0
votes
1answer
78 views

Wp custom post custom capability not working togather

I am trying to make a custom post type editable by a group of people (i.e. The users department) instead of only the author. I don't want to let them edit posts created by people of other groups(...
4
votes
1answer
321 views

What do unfiltered_html and unfiltered_upload actually filter?

Among WordPress' capabilities are unfiltered_html and unfiltered_upload, however I have yet to find any documentation about what specifically they allow or prevent in their filtering. The only ...
1
vote
1answer
72 views

What capability allows someone to change a page's/post's author?

I know that by default that administrators and editors can change the author of a page/post, but those with an author role can't. What role capability allows this? Is there a way to give this ...
1
vote
1answer
160 views

current_user_can() return FALSE but debugging says TRUE

BACKGROUND I have created a must-use plugin where I keep general functions. Like register_post_type(). Here I've created several Custom Post Types. With the help of several really good posts, I ...
0
votes
0answers
21 views

how to create page using add_menu_page?

how to create a new page in the administration menu, which will include (appearance -> header) and (Settings -> General) on one page?
1
vote
0answers
37 views

How to restrict access to specific pages on the back-end?

Before anything... I understand how roles and capabilities work. And there are tons of plugins that help you manage those. Roles and capabilities can only be so specific though. Is there "wordpress ...
0
votes
1answer
27 views

Let editors view post in admin but not be able to perform a save/edit

In a current project I need to be able to restrict access to posts by comparing the post's language against the languages a user has access to. This, I'm certain I can achieve. However, even if a ...
0
votes
0answers
32 views

Are dashboard widget settings global?

I followed the example of how to create a create a dashboard widget from WordPress' site to make a widget that reads an RSS feed and displays the items (yeah I know there are plugins that do this but ...
10
votes
3answers
367 views

What is valid timing of using current_user_can() and related functions?

During the vanilla WP core load the current user is being set up in $wp-init() which is after theme load and before init hook. This is in line with good practice of functionality getting hooked to ...
0
votes
1answer
16 views

Weird capabilities / roles behavior

I've been playing with the custom post types capabilities and some behaviors remains really mysticals for me. The Setup Say you have a Custom Post Type (CPT) called show for defining a radio ...
0
votes
1answer
95 views

Add capability to a role , so user is only able to view his own posts

I have created a user role vendor. Right now i am able to give the capabilities to the users, to be able to only edit,delete etc But then the user sees all the posts irrespective of who is the ...
0
votes
0answers
26 views

Wordpress Premium Access

I'm new to PHP and Wordpress. I actually achieved pretty much until now, but now I just cant figure out how to do one thing: Grant registered users access to "Additional Content", I don't know why, ...
0
votes
0answers
135 views

Front-end Posting: Allowing user to view/edit their pending post

So, I have a front end set up. I can write and submit a post. I have a list of my published and pending posts, which I can view and edit as an admin. I created a subscriber, but 'he' cannot access '...
1
vote
2answers
40 views

Restricted user capabilities cannot add image

I have restricted a users capabilities $capabilities = array( 'delete_posts' => true, 'delete_published_posts' => true, 'edit_posts' => true, '...
0
votes
1answer
1k views

current_user_can( 'edit_post', $post_id ) does not work for contributer but for administrator

I have a custom post type named ÷project÷ which has 'capability_type' => 'post' while registering using ÷register_post_type÷. in my theme files and also functions.php file, I have situations where ...
0
votes
0answers
285 views

get user role value as a string from wp usermeta table into custom script

Just came accross while retriving wp_capabilities from wp_usermeta table, this returns serialize output a:1:{s:13:"administrator";b:1;} When i unserialized, it gives an array Array ( [administrator]...
2
votes
1answer
140 views

Shold I manually add 'cap' to admin role ?

I've created a role: $role = add_role( 'role', 'role', array('read' => true) ); and so created a cap: $role->add_cap( 'cap' ); after this I'd created a submenu in admin menu with 'cap' as ...
0
votes
0answers
24 views

Adapt capabilities to specific users “IF”

I have a very specific issue with my Wordpress website. I use custom fields to assign some users to "group managers" and would like to prevent other "group managers" to change this custom field. ...
1
vote
0answers
29 views

Where are $current_user->allcaps set?

I recently found a problem with WP in which even the admin has no permission to get to anything on /wp-admin/. Oddly enough, when I compared the $current_user->allcaps to those on a normal site, I ...
0
votes
2answers
91 views

same user role or copy the user role to be same as the other role

how do you make the user role "contributor" to be same as the user role "seller" by using functions.php I've tried user role editor, but it seems to be the dokan multivendor plugin has set only into ...
1
vote
1answer
82 views

Custom post type submenu capabilities - custom plugin

I'm trying to add new custom capability so I can hide custom post type from non admins. In my custom post type I have some custom taxonomies and then 2 submenus. The administrator can see the menu of ...
0
votes
1answer
71 views

How to get a users list by who created them?

I have two users with the capability to create other users. But their roles are not same. Tom - Role is Administrator Jackie - Role is CMS Manger (a custom created role) Both have capability ...
2
votes
1answer
57 views

Let new user role to 'edit_others_posts' of other user role, not of its own type

In my system, I'm making two new roles: Third Party (TP) (lesser privileges) Data Entry Operator (DEO) (powerful over Third Party - but not of its own group) My CPT 'capabilities' parameter is ...
0
votes
1answer
142 views

Prevent author role from editing all posts in custom post type?

I thought the Author role was only allowed to edit posts created by that author. That works in Posts and Pages, but I created a custom post type and the author can edit ALL posts in that post type. Do ...
4
votes
0answers
184 views

Allowing custom role access to custom post type in back end

So I'm having some issues with this and I can't see why. I just need a custom role that can access the blog in the back end. I've added a new post type with a Capability type of blog and a new user ...
0
votes
0answers
80 views

Role capability delete multiple post type posts doesn't work

I am making a new role called "sales" where I add capabilities to, so the sales people only can read, edit and delete leads in the admin panel. Everything works fine, except that I cannot select ...
0
votes
1answer
114 views

Subscriber role - blank page

I did a fresh install of WP4.2 today, but after playing for a while with setting up a custom user roles I realized that the built-in subscriber role is returning blank page instead of the dashboard. ...
1
vote
1answer
259 views

Custom Post Type Capabilities — Enable Edit, Disable Create and Delete

I'm trying to configure capabilities for a custom post type. I want to enable editing, but disable creating and deleting. create_posts cannot be set to false unless delete_posts is also false, but it ...
0
votes
1answer
92 views

Prevent author role from editing others posts

I have created a custom post type "Extension" and a role "Extension Author". A user in this role should only be able to edit his/her own extensions. As it is now the user can click "edit extension" ...
0
votes
1answer
31 views

Plugin page and capabilities

i´am developing my own WP plugin with custom functions and i would like to show the new submenu in the standard admin panel for everyone, who logs in. My code: $capa = 'administrator' or 'author' or '...
1
vote
1answer
88 views

Stop users of author role from editing already pending posts

I want to stop authors from being able to constantly edit posts that are already pending review from editors. To clarify; I already have code in my theme that sets live posts to pending and that ...
0
votes
1answer
62 views

Manage Roles and Capabilities on Multi-site

I am trying to enable some features for Subscriber user role in a eCommerce theme where originally had be set for Admin role and I like to modify that. I tried AAM plugin but for this specific site ...
0
votes
2answers
101 views

Custom capabilities not reflecting on admin panel

I've made some custom post types, and some user roles. Each role has access to different custom post types. The thing is that edit_others_customposttypecapability, isn't working. I've tried logging ...
0
votes
1answer
20 views

Unable to access custom plugin backend

So, I just created a new plugin and i've added capabilities, a new role, linked them all together, etc.. etc.. but for some reason I'm unable to access my own backend. Error message is the generic ...
0
votes
1answer
43 views

Hide menu theme location for certain capabilities?

I have 6 menu theme locations setup with "register_nav_menus" I would like editors to be able assign custom menus to 3 of those locations and keep the other 3 only available to administrators. How ...
2
votes
1answer
394 views

Disable posts, only allow to edit existing pages, not create new ones (create_posts)

I am trying to limit a user role to only be able to edit existing pages, but not create new ones or do anything else like anything with posts. I have read this: Is there an existing capability to ...
6
votes
3answers
240 views

Capabilities Vs User Meta

What is the advantage of using capabilities instead of usermeta? For example a cap access_feature_x vs meta access_feature_x. I can use current_user_can() vs get_user_meta() on various checks. So,...
0
votes
1answer
41 views

Custom capability for a single user

I have this complex scenario: 1) I'll have multiple admin users. 2) Only one admin can 'see_encrypted_pass' Now, I want to assign custom 'see_encrypted_pass' capability to only one admin (say, John)...
0
votes
0answers
81 views

Add user role and add capability to view the plugin from that role

I have created a different user role. I want that role to view my plugin. I have tried adding the capabilities to that role. But it doesn't show up on their dashboard. What to do?
0
votes
1answer
2k views

Add Media Upload Capabilities Needed for Custom Role for non-Posts

I finally managed to update an old WP 3.3.1 site to WP 4.1 with few issues, but one unexpected change seems to have come about with relation to file uploads. In the WP 3.3.1 version of the plugin, I ...
0
votes
1answer
18 views

creating different edit screens for different roles

I have created a custom post type and custom role, created the proper capabilities and assigned them so the new role and see and edit their own ctp's entries... but I'd like to create a customized ...
0
votes
1answer
131 views

add_role menu pages are not visible

I added a custom role this way: add_role( 'tabellenadmin', __( 'Tabellenadministrator' ), array( 'activate_plugins' => true, 'delete_others_pages' => true, 'delete_others_posts' =&...
0
votes
1answer
47 views

What capabilities are assigned to unauthenticated users?

After reading the Roles and Capabilities article I can see that the Subscriber role has read capabilities only. What capabilities (if any) would be assigned to an unauthenticated user? i.e. a website ...
0
votes
3answers
563 views

current user can edit user?

I want to know if it is good practice to use: if ( current_user_can( 'edit_user', $user_id ) ) { // do something } because in Wordpress documentation a did not see this capability
1
vote
0answers
51 views

Usage of current_user_can()

I have a custom post type company, which has its own custom set of capabilities, including read_company, edit_companies, publish_companies, and delete_companies. In order to implement a role-based ...
0
votes
0answers
232 views

add_role user capability not working

I added a role this way: add_role( 'paar', __( 'Tanzpaar' ), array( 'add_users' => false, 'create_users' => false, 'delete_users' =&...
2
votes
1answer
233 views

Author Role - Allow editing of Gallery images

Is it possible to give the 'Author' role the capability of editing image titles and captions on post's they have created ? I have a number of users set to 'Author' , but when i've tested it's not ...
0
votes
0answers
46 views

Users can only save their draft once before saving for revision

I use the Members Plugin and Custom Post Types. I created a role and want them to contribute posts (within this Custom Post Type musician) but don't publish them. Additionally I want to give the ...
0
votes
1answer
2k views

Get User Role by ID not working

I'm using the PHP code seen at the bottom of this post to get the user's role from user ID. It works, but fails if the user role has been changed after registering. I've been looking for ages trying ...