for questions regarding permissions of different user groups in wordpress

learn more… | top users | synonyms

-1
votes
1answer
198 views

Default installation permissions for wp-config.php

Recently I've noticed that many of the wordpress installations we have on our servers where being attacked and ifected by this thing ...
1
vote
1answer
2k views

Enable plugin installs without FTP with user from same group as Nginx/PHP-fpm

I just setup a VPS and I installed everything I needed and it runs well. Problem is that I want it to be able to update automatically and allow me to install plugins without ftp. This is my setup: I ...
0
votes
0answers
24 views

Media upload privelages have been disabled for administrators - any ideas?

I have a nearly finished installation of Wordpress that was working fine. Then at some point the permissions for uploading images died for Administrator statuil. Details are: The issue: - I first ...
0
votes
0answers
36 views

Is it safe to assign WordPress files to apache user and group?

I'm moving from a vps to a dedicated server. Httpd runs as "apache" user and group. So I should change all WordPress files owner user and group to "apache", so that I don't have to chmod all files. ...
0
votes
0answers
14 views

Database Errors and User Permissions [duplicate]

I'm working on a customer's pre-existing site and I notice a ton of errors in the server logs. A typical error is WordPress database error DELETE command denied to user 'xxxxxxx'@'localhost' for ...
1
vote
1answer
50 views

Permissions in a Local Dev Environment (OS X)

I wanted to enable WordPress auto-updates to work without FTP, so I added: define('FS_METHOD', 'direct'); to my wp-config.php. So in order to grant write privileges to WordPress's auto-updater, I ran ...
6
votes
1answer
1k views

Disable Media Uploads to non Admin Users

I am working on a clients site, one of the features they want is for his Editors or Authors to only be able to select existing images to insert into Posts from the Media Library. So looking at the ...
2
votes
1answer
663 views

How can I have different groups of editors only allowed to edit certain parent+subpages?

I've tried a bunch of different plugins, including Role Scoper, Advanced Access Manager, User Account Manager and more, to accomplish this but can't seem to get it working right. Basically, the ...
0
votes
1answer
81 views

Can i exclude certain page templates for a specific role?

Let's say i have two types of templates available when making a Page. "Default template" and "Intermediate template". I have a role called "editor", and i do not want the editor to access the ...
1
vote
1answer
952 views

Allow Users Only Edit Their Profile?

We want to create profiles for individuals/companies which would allow them to login to the backend and adjust their profile. So essentially the admin of Wordpress would have access to all pages and ...
0
votes
1answer
608 views

Troubleshoot “You do not have sufficient permissions to access this page.”

I recently changed the database table prefix from wp_ to something else, for security reasons. Since then, I am unable to reach /wp-admin, instead receiving You do not have sufficient permissions ...
0
votes
1answer
91 views

wordpress using WP MVC: You do not have sufficient permissions to access this page

I am using wordpress 4.0, localhost, WP MVC for plugin development. I have a plugin named W2Store. It has three controllers, Countries, Currencies, Zones. All the three were mereged into one single ...
6
votes
2answers
996 views

How to prevent a post from being deleted?

For auditing issue, I only want a post can be trashed, but not deleted - for all users. So I have a plugin like add_action('before_delete_post', function($id) { wp_die(0); }); But ...
0
votes
1answer
98 views

How to hide wordpress error message?

how to hide wordpress error message "You do not have sufficient permissions to access this page" and show 404 error page for all non administrator's request like e.g mydomain.com/wp-admin/plugin.php ...
11
votes
3answers
23k views

Allow member to have access to custom post type only. Permission to only edit their own posts

OK I'm looking for the best way to attack this. I'm very comfortable with PHP and making custom post types with custom meta fields in WordPress. Here is what I'm looking at doing: User registers ...
0
votes
0answers
18 views

Proper permisssions for a file in uploads directory to be viewable by admin but not by public

What would be the proper permission to set for a file in wp-content/uploads so that it is not publicly viewable but can be accessed when logged into the admin area? Example - a user uploads a photo ...
0
votes
1answer
96 views

My Account Lost Administrator permission

Need help to solve this problem. First i did reflush all upgrade that didn’t complete that cause "WordPress Error: You do not have sufficient permissions to access this page" with force upgrade: ...
0
votes
0answers
65 views

Wordpress installation permission errors

I'm getting "Download failed. Failed to write request to temporary file." when I try to download plugins, and the plugins (that were working) are now unable to write what they need to (namely a ...
0
votes
0answers
51 views

How to restrict specific category posts from being read by specific user roles?

I would like that only users of role "Author" can read the posts of a category called "personal". How can I do it? Thanks
0
votes
0answers
87 views

Used Duplicator to transfer a site. Now my media uploads aren't working

I deleted an image from the Media tab and when I tried to upload another, I started getting this error: The uploaded file could not be moved to wp-content/uploads/2014/10 I tried CHMODing the ...
4
votes
1answer
319 views

Can't preview drafts after upgrade to 4.0!

I recently updated to wordpress 4.0. However, when I try to preview my drafts, I receive an error saying that I do not have the permission to do so. I've cleared my cache and cookies and restarted my ...
2
votes
1answer
2k views

Could not create directory

I have followed the instructions from https://help.ubuntu.com/community/WordPress ...
2
votes
2answers
3k views

Why does One Click Update fail on localhost using FTP with 777 permissions on site files?

I can successfully upload/remove media, add/remove plugins and edit theme files within admin CP. The one thing I can not do in admin CP is a normal one click update from WordPress 3.7.1 to 3.8. Ideas? ...
0
votes
1answer
73 views

Wordpress file permissions for editing on local Ubuntu development machine

I've seen a couple of solutions on this site that solved some permission problems, however, they seem that they create others, at least for me. My setup is a local wordpress installation on Ubuntu ...
0
votes
0answers
85 views

Cannot upload with 777 via plupload on Ubuntu 14

I'm using plupload in a HM plugin to let the users upload there logo. I just noticed that it only works on windows local server and in production mod. But on my test servers (2 servers both with ...
0
votes
1answer
34 views

Should I change the default file and folder permissions?

After reading the Hardening WordPress article I realise a good permission scheme is essential to the security of my WordPress installation. The article suggests a possible permissions scheme but my ...
0
votes
1answer
72 views

Uploaded files have permission 000

two days ago i updated wp to the newest version and this problem occurs since then. when i upload files to the media library, their file permissions are set to 000. means no rights. the files are ...
0
votes
2answers
51 views

page creator to leave comments ONLY

I am trying to set it so that the person who created a Page is the ONLY one who can comment on that particular page. This will be a logged in person. I haven't had any luck with Role Editor Plugins. ...
0
votes
0answers
54 views

Cannot upload to new wordpress installation in subdirectory on same server as existing installation

To make a smooth transition to a new site, we created a fresh new wordpress installation (3.9.2) in a subfolder of the root, called wp2. (The intention is to eventually redirect entirely to this site) ...
5
votes
1answer
6k views

when FS_METHOD = 'direct' is chosen?

According to the Wordpress Codes FS_METHOD = 'direct' is chosen when appropriate. (Primary Preference) "direct" forces it to use Direct File I/O requests from within PHP, this is fraught with ...
0
votes
1answer
105 views

Restrict access to trash, only admin

I'm new in WordPress. I have to restrict access to the Trash for all users except the administrator. All users CAN move to the Trash, but only admin can delete permanently or restored. I do not know ...
0
votes
2answers
527 views

Can't Install Standard Plugins on a Local MAMP installation

I've tried to install two standard plugsins (wp-touch was one). I have a local installation under OS 10.6 and MAMP which otherwise seems to work fine. I select the zip file but get the error ...
0
votes
0answers
14 views

Multidomain site with custom permissions

We are going to build single instalation wordpress multidomain site, where each domain is used for different language. domain.com - english, domain.lv - latvian, domain.ru - russian, etc. All sites ...
2
votes
1answer
88 views

Why is group ownership with rwx permissions not enough?

Running PHP 5.4 and Apache2 on Debian 7, with apache configured to use user www-data. I'm trying to figure out why Wordpress cannot modify files in its directory when it has group ownership with ...
0
votes
1answer
74 views

bypassing permission error for a plugin's page

i'm getting "You do not have sufficient permissions to access this page" error when trying to go to a plugin's settings. there's only one user which is the admin and has full access. this is the URL ...
1
vote
0answers
252 views

Grant user rights to access certain tabs of a plugin

I found out a way to grant a user permission to access a single plugin but it has its flaws. Right now there are 6 tabs on the options page of this plugin. The user has access to all these tabs ...
1
vote
2answers
88 views

Hide images from anonymous user?

I'd like to set my WordPress (self-hosted) site up so that you can only view images if you're logged in. I want it to be impossible to view the images without being authorized as a user of the site. ...
0
votes
1answer
285 views

Which WordPress scripts need to be executable for a fresh installation?

For security reasons I need to block access to scripts that will not be executed on a fresh WordPress installation. Example: /index.php --> needs to be executable /wp-includes/cache.php --> should ...
0
votes
0answers
141 views

Wordpress asking FTP Details

When i attempt to upload my plugin, WordPress asks for my FTP Credentials. After entering them, WordPress returns the error: Failed to connect to FTP Server ftp.domain.com:21 but my FTP ...
0
votes
2answers
86 views

How to prevent people from seeing certain articles in menus?

I found several plugins that prevent people from seeing certain widgets and posts. However, the posts I restrict still show up in all the places where you can see posts. They show up in search menus ...
0
votes
0answers
33 views

Folder Permissions + Security Concerns

I messed up bad guys. I while working on another part of my website I accidentally nuked my WordPress folder permissions. I was able to find/fix some problems and I got my site up and running but some ...
12
votes
4answers
8k views

How to to secure WordPress file and folder permissions

I've read articles about protecting wp-config.php using .htaccess as well as setting the correct file permissions but I want it all in one place. What should my .htaccess file look like and what ...
0
votes
0answers
30 views

Editor have not permissions for a plugin

I use static html output plugin to export pages to html, but only the admin can use this plugin. A editor have not permissions to export a html page. It says: You do not have sufficient permissions ...
0
votes
0answers
80 views

Set role for manage users only under a role

I have to implement membership functionality where a user (company owner) can manage multiple users(employees) under him. I have created two roles in members plugin - Company user - Can add ...
1
vote
0answers
44 views

Securing a multi-user permission structure

I'm currently working on a team that needs two distinct users from the same wpadmin group to be able to modify the wordpress files. Following the guide at Hardening WordPress (Codex), the following ...
0
votes
1answer
62 views

Moved Wordpress Directory - Having access issues now

I uploaded a couple of untouched Wordpress directories to my server and named them wordpress1, wordpress2, wordpress3 and so on. The reason behind is that I have a slow Internet Connection at home and ...
0
votes
3answers
55 views

Permission functions within wordpress

I'm currently developing a website and am exploring all possible options to restrict file viewing. I'm trying to find a way where I can load php files like my theme-options.php and cpt.php without ...
0
votes
1answer
103 views

Which directory should be writable to update wordpress?

I configured file permissions according to here like this. apache user runs server and wordpress user owns directory, this user is only used for this site. drwxr-xr-x 5 wordpress wordpress 4096 ...
1
vote
1answer
77 views

Correct folder permissions?

I just recently installed PHP and wordpress on our coldfusion box and wordpress is throwing me an dialog saying I need to input FTP information so wordpress can alter the files. I read up on this and ...
1
vote
1answer
120 views

Prevent Wordpress installing plugins and themes via Admin

When I initially set up WP, I had entered my FTP details in the Admin so that I could add plugins and themes directly from Admin. However, I believe this compromises the website as I have found ...