for questions regarding permissions of different user groups in wordpress

learn more… | top users | synonyms

15
votes
3answers
7k views

MySQL Database User: Which Privileges are needed?

The short installation instruction for WordPress ("5 Minutes") state that: Create a database for WordPress on your web server, as well as a MySQL user who has all privileges for accessing and ...
11
votes
4answers
6k views

How to to secure WordPress file and folder permissions

I've read articles about protecting wp-config.php using .htaccess as well as setting the correct file permissions but I want it all in one place. What should my .htaccess file look like and what ...
9
votes
3answers
14k views

Allow member to have access to custom post type only. Permission to only edit their own posts

OK I'm looking for the best way to attack this. I'm very comfortable with PHP and making custom post types with custom meta fields in WordPress. Here is what I'm looking at doing: User registers ...
8
votes
8answers
11k views

Is there a way (plugin?) to restrict a user to being able to edit just one page?

We use wordpress like a CMS and would very much like to allow users to have a "homepage". Ideally they'd be prevented from mucking up the whole site. Is there a simple way to limit users editing ...
6
votes
2answers
583 views

How to prevent a post from being deleted?

For auditing issue, I only want a post can be trashed, but not deleted - for all users. So I have a plugin like add_action('before_delete_post', function($id) { wp_die(0); }); But ...
6
votes
1answer
630 views

Disable Media Uploads to non Admin Users

I am working on a clients site, one of the features they want is for his Editors or Authors to only be able to select existing images to insert into Posts from the Media Library. So looking at the ...
5
votes
4answers
7k views

What are the recommended database permissions for WordPress?

I just got WP running on my own server. I am not trying to lock things down more. What permissions should the db user have to my WP db?
5
votes
2answers
864 views

File and directory permissions

I installed latest WordPress 3.5 in my CentOS server. When I tried accessing http://example.com/wp-includes/, I received a listing of the directory: (Index of wp-includes). I added the following code ...
5
votes
1answer
4k views

How do I get the right permissions for WordPress running Apache on Debian

I'm trying to set up a WordPress site on a LAMP stack on Debian 6.0. From the WordPress documentation (and my experience on shared hosts) the correct permissions should be as follows All files ...
5
votes
6answers
13k views

Can't upload images due to permissions error

For some reason when I try to upload an image to my blog I get an error message saying that WP can't create a folder under the relevant directory (wp-content/uploads/2010/09) and it's asking if the ...
5
votes
3answers
1k views

How to Control user registrations directly on sub-sites

Does anybody have Idea to enable a wordpress based multisite user to automatically get access to all sub-sites under same Multi site ? If I have A Multi-site installation(Also Buddypress enabled) at ...
4
votes
1answer
2k views

add_menu_page permissions - what am I doing wrong?

I am running a fresh install of Wordpress 3.3.2 and the only plugin enabled is one I'm developing, but I can't seem to get past a permissions issue in add_menu_page. With the exception of using ...
4
votes
3answers
130 views

How to let authors revise other authors drafts, but keep them from publishing?

I want to give all authors permission to edit other authors drafts, but not publish them. It seems like the only way to give authors access to drafts by other authors is to grant them ...
3
votes
2answers
7k views

Create custom permissions for user type

I'm currently wanting to have it so that writers on my site have to have an admin approve their content before it's published, but still be allowed to do other tasks such as uploading images, adding ...
3
votes
1answer
247 views

WordPress keeps asking for connection information in localhost

I tried to find and answer but even though the problem is common I haven't been able to fix it, WP keeps asking me for the FTP info on my local LAMP environment when trying to install, delete or ...
3
votes
1answer
1k views

when FS_METHOD = 'direct' is chosen?

According to the Wordpress Codes FS_METHOD = 'direct' is chosen when appropriate. (Primary Preference) "direct" forces it to use Direct File I/O requests from within PHP, this is fraught with ...
3
votes
1answer
67 views

How does WordPress update plugins, without running into permissions issues?

I am developing a plugin for PrestaShop, it works but the issue is with its autoupdate. Sometimes it fails on customers server due to permissions issues. How exactly does WordPress handle plugin ...
3
votes
1answer
1k views

Update post counts (published, draft, unattached) in admin interface

I am working on a multi-user WordPress setup and have made it so a particular type of user can only see and interact with posts, images, pages etc that they have authored. The code to make this happen ...
2
votes
2answers
524 views

How to filter the role selector?

I know that roles in WordPress are not hierarchical, but I'm wondering if there is any type of capability to "assign users to roles". All I can see if being able to add users or not. The real kicker ...
2
votes
1answer
882 views

Prevent or Disable creating new users or changing roles of existing users to Administrator

I am trying to give more permissions to the editor role by giving it access to create user accounts. See the code below. But I would like to prevent it from creating or editing existing users with the ...
2
votes
1answer
6k views

How can I limit WordPress editor roles to a specific category?

We're trying to use WordPress as a light CMS system and we need to be able to section off parts of WordPress so that editors for one product aren't able to edit other products. Seems like out of the ...
2
votes
2answers
6k views

Can't install new plugins because of the error “Could not create directory”

A faculty member is having difficulties with a instructional wordpress install. Fixing individual permission problems has been hit and miss, and have become a perennial pain, so I'll ask here. What ...
2
votes
2answers
261 views

How can I make my custom templates respect permissions?

I use the Members plugin to manage permissions on my site. For standard templates, it works great - when the user doesn't have permission to see a page, they get the following message: Sorry, but ...
2
votes
2answers
1k views

Why does One Click Update fail on localhost using FTP with 777 permissions on site files?

I can successfully upload/remove media, add/remove plugins and edit theme files within admin CP. The one thing I can not do in admin CP is a normal one click update from WordPress 3.7.1 to 3.8. Ideas? ...
2
votes
1answer
2k views

Editing Wordpress Permissions in LAMP - Ubuntu 11.10

I'm hosting a local version of my wordpress theme on Ubuntu 11.10. However, LAMP is installed in a directory that requires sudo privileges. When I try to add images or any outside content to my ...
2
votes
2answers
2k views

Recommended File Permissions

Hey guys, I have been spending the longest time trying to figure out this issue. I would like to know what the file permissions should look like in WordPress in order to use the autoupdate feature. As ...
2
votes
1answer
77 views

Does WordPress have fine-grained view permissions?

I am considering using WordPress for a number of users in overlapping groups, e.g. a user may be in group A and group B, or only group A. Is it possible to use WordPress to limit access to particular ...
2
votes
0answers
26 views

Can't preview drafts after upgrade to 4.0!

I recently updated to wordpress 4.0. However, when I try to preview my drafts, I receive an error saying that I do not have the permission to do so. I've cleared my cache and cookies and restarted my ...
2
votes
1answer
449 views

Could not create directory

I have followed the instructions from https://help.ubuntu.com/community/WordPress ...
2
votes
1answer
47 views

Why is group ownership with rwx permissions not enough?

Running PHP 5.4 and Apache2 on Debian 7, with apache configured to use user www-data. I'm trying to figure out why Wordpress cannot modify files in its directory when it has group ownership with ...
2
votes
1answer
124 views

Is there a simple way to manage capabilities per user?

I have a WordPress-Site where some people (non-expert clients) need to create/manage users. The site uses multiple custom post types and each user is assigned permissions for one or several of those ...
2
votes
0answers
161 views

Can't use the built-in wordpress install/upgrade plugin feature [closed]

When I try to upgrade or install a plugin I get a successful message: Downloading install package from http://downloads.wordpress.org/plugin/jquery-lightbox-gallery.zip… Unpacking the package… ...
2
votes
1answer
453 views

How can I have different groups of editors only allowed to edit certain parent+subpages?

I've tried a bunch of different plugins, including Role Scoper, Advanced Access Manager, User Account Manager and more, to accomplish this but can't seem to get it working right. Basically, the ...
2
votes
1answer
232 views

Restrict users on multisite WordPress install

I have a series of sites that I maintain as part of a WordPress multisite install. I'd like to be able to create users accounts that are restricted to viewing only a single one of these sites. Is ...
2
votes
2answers
302 views

Allow User to Edit Page Based on their Email

Quick Info I am using the Posts 2 Posts plugin in order to create a relation between Teachers and the Classes they teach. The teacher's page is a custom post type of faculty in which teachers are ...
2
votes
1answer
406 views

Wordpress stripping html and script tags from some admin users on save

When I add content to a page as the original admin user, I can past in the following code and it saves fine (old google search set up by another user): <form action="http://www.google.com/cse" ...
1
vote
3answers
534 views

You do not have sufficient permissions to access this page

After long time am here,I have one question. I Installed my wordpress in localhost and i moved to live,while i forgot the admin password,so i reset it by phpmyadmin(using md5).now i try to login by ...
1
vote
1answer
719 views

Export data as CSV in back end with proper HTTP headers

I wrote a plugin that displays all products in a woocommerce store in admin settings option, now I want to add a link to download the products as CSV file. The problem is, when I click the link I get ...
1
vote
1answer
3k views

Advanced Custom Fields/User Role Editor - how to hide ACF for certain users?

I am using User Role Editor to specify customized user roles. I am also using Advanced Custom Fields plugin. I would like to be able to hide Advanced Custom Fields from showing up for certain users; ...
1
vote
1answer
1k views

Network Admin “You do not have sufficient permissions to access this page.”

I have had trouble logging into WP-Admin with my admin account. I have reset my password, and I can now log-in to WP-Admin, but cannot reach Network Admin (/wp-admin/network), instead receiving "You ...
1
vote
1answer
396 views

Are these wp-content permissions safe?

I have just started out with a VPS running centos 6.3 to host my blog and play around. After Installing WordPress 3.5.1, when I tried to install some plugins from the admin console, it complained of ...
1
vote
1answer
221 views

plugin install wants ftp (chown and 755 not enough)

I have root access in ssh to my install (and other wp install working) so im not sure what i missed... installing plugins through the wp-admin interface, it wants me to input ftp. i remember this ...
1
vote
2answers
63 views

What permissions should I give directories if I want to make WordPress more secure?

A follow up to a previous question found here How can I lock down an old wordpress install I don't intend to update? Same info still stands. WordPress install will (probably) not be updated. ...
1
vote
3answers
226 views

How do I apply a class to custom menu items based on user roles

I have a members section on my site and they see specific custom menu items. I'm seeking a way to simply apply a star to the <li> based on it's permission level and what the user's role is. ...
1
vote
2answers
2k views

Manage custom menu for an Editor?

I've a problem with permission. Is there a specific permission to let an user with Editor Role, manage the custom menu of a theme, and only this options? The item that is under Appereance -> Menu, to ...
1
vote
2answers
73 views

Hardening wordpress: wp-content file permissions?

I'm writing a script to automatically check file permissions in all wordpress installations on a server. This document http://codex.wordpress.org/Hardening_WordPress is unclear on a certain point: ...
1
vote
1answer
34 views

Correct folder permissions?

I just recently installed PHP and wordpress on our coldfusion box and wordpress is throwing me an dialog saying I need to input FTP information so wordpress can alter the files. I read up on this and ...
1
vote
1answer
59 views

Prevent Wordpress installing plugins and themes via Admin

When I initially set up WP, I had entered my FTP details in the Admin so that I could add plugins and themes directly from Admin. However, I believe this compromises the website as I have found ...
1
vote
1answer
670 views

wordpress upload permission on nginx & ubuntu

I have a problem with wordpress upload folder permission on nginx/ubuntu VPS. keep getting the error: “asr.jpg” has failed to upload due to an error Unable to create directory uploads/2014/02. ...
1
vote
2answers
295 views

Running WordPress as FTP user?

I've been doing some research on file permissions as of late, as my WordPress installation on my VPS doesn't have write access. From what I've heard it's very dangerous to make the apache user the ...