for questions regarding permissions of different user groups in wordpress

learn more… | top users | synonyms

14
votes
3answers
5k views

MySQL Database User: Which Privileges are needed?

The short installation instruction for WordPress ("5 Minutes") state that: Create a database for WordPress on your web server, as well as a MySQL user who has all privileges for accessing and ...
10
votes
4answers
5k views

How to to secure WordPress file and folder permissions

I've read articles about protecting wp-config.php using .htaccess as well as setting the correct file permissions but I want it all in one place. What should my .htaccess file look like and what ...
8
votes
3answers
11k views

Allow member to have access to custom post type only. Permission to only edit their own posts

OK I'm looking for the best way to attack this. I'm very comfortable with PHP and making custom post types with custom meta fields in WordPress. Here is what I'm looking at doing: User registers ...
6
votes
2answers
426 views

How to prevent a post from being deleted?

For auditing issue, I only want a post can be trashed, but not deleted - for all users. So I have a plugin like add_action('before_delete_post', function($id) { wp_die(0); }); But ...
5
votes
8answers
9k views

Is there a way (plugin?) to restrict a user to being able to edit just one page?

We use wordpress like a CMS and would very much like to allow users to have a "homepage". Ideally they'd be prevented from mucking up the whole site. Is there a simple way to limit users editing ...
5
votes
2answers
364 views

Disable Media Uploads to non Admin Users

I am working on a clients site, one of the features they want is for his Editors or Authors to only be able to select existing images to insert into Posts from the Media Library. So looking at the ...
5
votes
2answers
743 views

File and directory permissions

I installed latest WordPress 3.5 in my CentOS server. When I tried accessing http://example.com/wp-includes/, I received a listing of the directory: (Index of wp-includes). I added the following code ...
5
votes
1answer
3k views

How do I get the right permissions for WordPress running Apache on Debian

I'm trying to set up a WordPress site on a LAMP stack on Debian 6.0. From the WordPress documentation (and my experience on shared hosts) the correct permissions should be as follows All files ...
5
votes
3answers
1k views

How to Control user registrations directly on sub-sites

Does anybody have Idea to enable a wordpress based multisite user to automatically get access to all sub-sites under same Multi site ? If I have A Multi-site installation(Also Buddypress enabled) at ...
4
votes
1answer
1k views

add_menu_page permissions - what am I doing wrong?

I am running a fresh install of Wordpress 3.3.2 and the only plugin enabled is one I'm developing, but I can't seem to get past a permissions issue in add_menu_page. With the exception of using ...
4
votes
3answers
6k views

What are the recommended database permissions for WordPress?

I just got WP running on my own server. I am not trying to lock things down more. What permissions should the db user have to my WP db?
4
votes
3answers
126 views

How to let authors revise other authors drafts, but keep them from publishing?

I want to give all authors permission to edit other authors drafts, but not publish them. It seems like the only way to give authors access to drafts by other authors is to grant them ...
4
votes
6answers
11k views

Can't upload images due to permissions error

For some reason when I try to upload an image to my blog I get an error message saying that WP can't create a folder under the relevant directory (wp-content/uploads/2010/09) and it's asking if the ...
3
votes
2answers
6k views

Create custom permissions for user type

I'm currently wanting to have it so that writers on my site have to have an admin approve their content before it's published, but still be allowed to do other tasks such as uploading images, adding ...
3
votes
1answer
196 views

WordPress keeps asking for connection information in localhost

I tried to find and answer but even though the problem is common I haven't been able to fix it, WP keeps asking me for the FTP info on my local LAMP environment when trying to install, delete or ...
3
votes
1answer
64 views

How does WordPress update plugins, without running into permissions issues?

I am developing a plugin for PrestaShop, it works but the issue is with its autoupdate. Sometimes it fails on customers server due to permissions issues. How exactly does WordPress handle plugin ...
3
votes
1answer
844 views

Update post counts (published, draft, unattached) in admin interface

I am working on a multi-user WordPress setup and have made it so a particular type of user can only see and interact with posts, images, pages etc that they have authored. The code to make this happen ...
2
votes
2answers
392 views

How to filter the role selector?

I know that roles in WordPress are not hierarchical, but I'm wondering if there is any type of capability to "assign users to roles". All I can see if being able to add users or not. The real kicker ...
2
votes
1answer
5k views

How can I limit WordPress editor roles to a specific category?

We're trying to use WordPress as a light CMS system and we need to be able to section off parts of WordPress so that editors for one product aren't able to edit other products. Seems like out of the ...
2
votes
2answers
4k views

Can't install new plugins because of the error “Could not create directory”

A faculty member is having difficulties with a instructional wordpress install. Fixing individual permission problems has been hit and miss, and have become a perennial pain, so I'll ask here. What ...
2
votes
2answers
242 views

How can I make my custom templates respect permissions?

I use the Members plugin to manage permissions on my site. For standard templates, it works great - when the user doesn't have permission to see a page, they get the following message: Sorry, but ...
2
votes
1answer
723 views

Prevent or Disable creating new users or changing roles of existing users to Administrator

I am trying to give more permissions to the editor role by giving it access to create user accounts. See the code below. But I would like to prevent it from creating or editing existing users with the ...
2
votes
2answers
1k views

Recommended File Permissions

Hey guys, I have been spending the longest time trying to figure out this issue. I would like to know what the file permissions should look like in WordPress in order to use the autoupdate feature. As ...
2
votes
1answer
25 views

when FS_METHOD = 'direct' is chosen?

According to the Wordpress Codes FS_METHOD = 'direct' is chosen when appropriate. (Primary Preference) "direct" forces it to use Direct File I/O requests from within PHP, this is fraught with ...
2
votes
1answer
66 views

Does WordPress have fine-grained view permissions?

I am considering using WordPress for a number of users in overlapping groups, e.g. a user may be in group A and group B, or only group A. Is it possible to use WordPress to limit access to particular ...
2
votes
1answer
86 views

Is there a simple way to manage capabilities per user?

I have a WordPress-Site where some people (non-expert clients) need to create/manage users. The site uses multiple custom post types and each user is assigned permissions for one or several of those ...
2
votes
0answers
127 views

Can't use the built-in wordpress install/upgrade plugin feature [closed]

When I try to upgrade or install a plugin I get a successful message: Downloading install package from http://downloads.wordpress.org/plugin/jquery-lightbox-gallery.zip… Unpacking the package… ...
2
votes
1answer
334 views

How can I have different groups of editors only allowed to edit certain parent+subpages?

I've tried a bunch of different plugins, including Role Scoper, Advanced Access Manager, User Account Manager and more, to accomplish this but can't seem to get it working right. Basically, the ...
2
votes
1answer
170 views

Restrict users on multisite WordPress install

I have a series of sites that I maintain as part of a WordPress multisite install. I'd like to be able to create users accounts that are restricted to viewing only a single one of these sites. Is ...
2
votes
2answers
277 views

Allow User to Edit Page Based on their Email

Quick Info I am using the Posts 2 Posts plugin in order to create a relation between Teachers and the Classes they teach. The teacher's page is a custom post type of faculty in which teachers are ...
1
vote
3answers
489 views

You do not have sufficient permissions to access this page

After long time am here,I have one question. I Installed my wordpress in localhost and i moved to live,while i forgot the admin password,so i reset it by phpmyadmin(using md5).now i try to login by ...
1
vote
1answer
419 views

Export data as CSV in back end with proper HTTP headers

I wrote a plugin that displays all products in a woocommerce store in admin settings option, now I want to add a link to download the products as CSV file. The problem is, when I click the link I get ...
1
vote
1answer
2k views

Advanced Custom Fields/User Role Editor - how to hide ACF for certain users?

I am using User Role Editor to specify customized user roles. I am also using Advanced Custom Fields plugin. I would like to be able to hide Advanced Custom Fields from showing up for certain users; ...
1
vote
1answer
1k views

Network Admin “You do not have sufficient permissions to access this page.”

I have had trouble logging into WP-Admin with my admin account. I have reset my password, and I can now log-in to WP-Admin, but cannot reach Network Admin (/wp-admin/network), instead receiving "You ...
1
vote
1answer
498 views

Why does One Click Update fail on localhost using FTP with 777 permissions on site files?

I can successfully upload/remove media, add/remove plugins and edit theme files within admin CP. The one thing I can not do in admin CP is a normal one click update from WordPress 3.7.1 to 3.8. Ideas? ...
1
vote
1answer
338 views

Are these wp-content permissions safe?

I have just started out with a VPS running centos 6.3 to host my blog and play around. After Installing WordPress 3.5.1, when I tried to install some plugins from the admin console, it complained of ...
1
vote
1answer
196 views

plugin install wants ftp (chown and 755 not enough)

I have root access in ssh to my install (and other wp install working) so im not sure what i missed... installing plugins through the wp-admin interface, it wants me to input ftp. i remember this ...
1
vote
2answers
60 views

What permissions should I give directories if I want to make WordPress more secure?

A follow up to a previous question found here How can I lock down an old wordpress install I don't intend to update? Same info still stands. WordPress install will (probably) not be updated. ...
1
vote
3answers
219 views

How do I apply a class to custom menu items based on user roles

I have a members section on my site and they see specific custom menu items. I'm seeking a way to simply apply a star to the <li> based on it's permission level and what the user's role is. ...
1
vote
2answers
1k views

Manage custom menu for an Editor?

I've a problem with permission. Is there a specific permission to let an user with Editor Role, manage the custom menu of a theme, and only this options? The item that is under Appereance -> Menu, to ...
1
vote
1answer
35 views

Prevent Wordpress installing plugins and themes via Admin

When I initially set up WP, I had entered my FTP details in the Admin so that I could add plugins and themes directly from Admin. However, I believe this compromises the website as I have found ...
1
vote
1answer
314 views

wordpress upload permission on nginx & ubuntu

I have a problem with wordpress upload folder permission on nginx/ubuntu VPS. keep getting the error: “asr.jpg” has failed to upload due to an error Unable to create directory uploads/2014/02. ...
1
vote
2answers
107 views

Running WordPress as FTP user?

I've been doing some research on file permissions as of late, as my WordPress installation on my VPS doesn't have write access. From what I've heard it's very dangerous to make the apache user the ...
1
vote
1answer
45 views

Iframe a WordPress template

I am trying to iframe a template in WP e.g. <p><a class='iframe' href="<?php bloginfo('template_directory'); ?>/training-form.php">Book Now</a></p> This gives me a ...
1
vote
3answers
2k views

Cannot upload anything via wordpress

I've just recently installed a local installation of Wordpress 3.5.2 on my laptop, running ubuntu 12.10. I installed following the guide from here. So far, everything else is working, except I cannot ...
1
vote
1answer
34 views

Use mulitple usernames?

Can I configure wordpress to use two database usernames, one to read (which has read-only permissions in the database) and one to post (who is hidden in a protected wp-admin directory) for security ...
1
vote
2answers
415 views

Create Read Only Admin

Is there an easy way to create an admin user that has read only permissions? That is, they can login and see everything an admin can, but they cannot change anything at all.
1
vote
1answer
755 views

Roles for Custom Post Types

I created some custom post types, but I would like to hide them in the dashboard from Subscribers, Authors, and Editors (essentially, just allow administrators to access them). Can I do this without ...
1
vote
1answer
543 views

Plugins will only be installed with 777 on folder. Solution?

I'm 100% not the first asking this question, yet I want to have this question be answered to my situation.. I got Wordpress installed on my server (I host it at Versio.nl) and configured whole ...
1
vote
1answer
166 views

Apply permissions per post

We have a WordPress site where we have external authors for whom we have created usernames at the Editor level. We want these editors to be able to create new posts and modify their own posts, but ...