Questions tagged [capabilities]

WordPress uses a concept of Roles, designed to give the site owner the ability to control what users can and cannot do within the site. Each role is allowed to perform a set of tasks called Capabilities.

Filter by
Sorted by
Tagged with
9
votes
1answer
406 views

Why is javascript allowed in my post content?

The codex says you can't add javascript in the post content https://codex.wordpress.org/Using_Javascript But I can. I've turned off all plugins and changed to twentysixteen theme, but to no avail - ...
1
vote
1answer
172 views

Trouble adding JavaScript in visual editor (Sharpspring embed code)

I am trying to add the embed code for a sharpspring form signup to my site. It says that it works with WordPress but when I add the code to the text section of the page and save the script tags are ...
1
vote
2answers
2k views

Add a role and give admin priviledges

I am creating a Super Admin role in wordpress Roles. $capabilities=array(); add_role('Administrator', 'Administrator', $capabilities ); add_role('Super Admin', 'Super Admin', $capabilities) ); So ...
0
votes
1answer
66 views

WP Capabilities to Add Media, Use Media, But Not Edit Them

I just want to have role that can specifically adding media, use the existed media, but not edit OR delete them. I was looking for the capability, but I don't see it listed. Or it's really ...
4
votes
1answer
108 views

Hide specific admin users' posts

I'm currently trying to modify my WordPress site so that Authors can not see a specific Admin's posts while editing, but are still able to see each other's posts (as well as the other Admins). With ...
3
votes
1answer
2k views

Create user role restricted to specific CPT

I am trying to create a role that can create and submit to a CPT only. When I take away edit_post from the role, it revokes the ability to create and edit any of the assigned and registered CPTs as ...
2
votes
1answer
1k views

Multiple Authors on Single Post

Does anyone know how to assign multiple Users as authors of single individual posts (even single custom post types)? I want more than just displaying as tags the list of authors. I am looking at the ...
4
votes
1answer
7k views

How to get all capabilities of an existing user role

How can I get ALL the capabilities of an existing user role (eg. Author) ? I'll be using it to quickly duplicate an existing user role, then create a new role then assign or remove capabilities to a ...
1
vote
2answers
160 views

How to safely allow user upload on CPTs?

I have a form with a WP Media to allow user uploads for a custom post type on the front end. Every time I try to upload as a user I can the message You don't have permission to attach files to this ...
4
votes
2answers
709 views

How to update user role without logout

I am working on a wordpress project with the following plugins : Woocommerce Woocommerce product vendors WP Job Manager Wp Job Manager products I am trying to upgrade the user role after adding a ...
2
votes
0answers
123 views

Add custom capabilities to existing custom post type

The only way I can find to associate post types with custom capabilities is during the register_post_type function. I'm looking to add a capability for a certain role (my_role) for a post type that ...
0
votes
1answer
1k views

Custom Post Type - after disable 'Add New', I can't edit and delete post

I need to disable 'Add New' button for my CPT, but when I add: 'capabilities' => array( 'create_posts' => false, 'edit_posts' => true, 'edit_post' => true, 'delete_post' =&...
1
vote
1answer
426 views

Adding an additional role to an Administrator

User 19 is a WP Admin. $user = new WP_user( 19 ); $user->add_role( 'custom_role' ); The above code works and adds the custom_role role. However, when I run the same code on the ...
0
votes
1answer
428 views

Remove Custom Capability

I have created a custom post type 'book'. All book post-type are public, so I want to remove some capabilities such as 'delete_private_books', 'read_private_books' etc. How can I achieve this since ...
1
vote
1answer
206 views

You do not have sufficient permissions to access this page on a submenu

I'm writing my first plugin for WordPress and am running into a permission issue when trying to pass a parameter to a page. I've added a submenu page to process a delete for a category from the ...
1
vote
2answers
3k views

User role permissions based on taxonomies

I was wondering if it's possible to set up user roles in a way that means that users in certain groups can ONLY edit posts that have a specific taxonomy assigned to them e.g: Properties (Post Type) ...
9
votes
3answers
22k views

How can I get a list of users by their role?

How can I get a list of all users that are in WordPress by their role or capabilities? For example: Display all subscribers list in WordPress. Display all authors list in WordPress. Display all ...
0
votes
1answer
196 views

Redirect admin 403 “Cheatin uh?” admin pages

Blocking role capabilities on the admin returns the 403 "Cheatin Uh?" page. What is the best way to redirect this to 403 page to perhaps the dashboard, homepage, or a custom 403 page? I know I could ...
0
votes
1answer
62 views

What is more secure checking capabilities of user or checking role of user in WordPress plugin development

Suppose I need to check the logged in user is subscriber not anyone else. So if I check the capability like "read". Then subscriber is OK but "read" capability is also associated to admin/publisher as ...
0
votes
1answer
726 views

Why cannot author edit pages?

I have this in my functions.php (child theme) //Add capabilities to author, so he/she can edit... function add_theme_caps() { // gets the author role $role = get_role( 'author' ); $...
-1
votes
1answer
690 views

Sync roles across several plugins

Here is the setup: I am implementing Wordpress with two specific plugins: Ultimate Members and Yith Vendors which is a woocommece addon. What I need to do is change a field's data in the database ...
4
votes
1answer
857 views

REST API: How can I restrict a custom post type to only be accessible by authenticated users?

I have a custom post type configured to be accessible via the WP Rest API v2. How do I lock the access to this custom post type so that only the authenticated users can perform GET requests?
1
vote
1answer
1k views

Custom role capabilities to administrator not taking effect (no plugin)

I have created a custom post type from a plugin. I added a capability type teacher. Then I have added custom capabilities to administrator. But the problem is for the first time after completing this ...
5
votes
2answers
3k views

Change capability type of post type registered by plugin

I'm using the plugin Custom CSS JS which registers it's own post type but the capability is assigned to "post". I want to change it to "manage_options". Is there a correct way without altering the ...
1
vote
1answer
519 views

How to restrict author to only access one custom post type ?

My installed Wordpress have 4 custom post type and 1 default post type. Basically what i want is that the author can also access particular one custom post type. Author must not see other post types.
2
votes
2answers
990 views

Allow users to set a post author

I have a website owned by myself that allows people to submit work for us to publish. I have a team of staff who need to create posts..etc I have assigned users the author role which allows them to ...
0
votes
1answer
74 views

How to add a menu page for options in wordpress for user that has the role of vendor?

I want to add new options page ONLY for those users whose role is vendor. How can I do that? This is my current code. add_action('admin_menu', 'business_settings_menu'); function ...
3
votes
1answer
662 views

Remove upload_files capability from a role but allow role to manage an avatar image

I have a site with 1 admin, 11 editors, and 4000+ authors. I need to prevent the authors from adding media to the server and using up all the storage. Initially I tried function removemediabuttons(...
1
vote
0answers
561 views

Cannot Create new Post within Custom Post Type

I have a custom post type registered and when registering I am using... if( !post_type_exists( 'email_template' ) ) { register_post_type( 'email_template', array( ...
0
votes
1answer
637 views

Force “submit for review” on update?

I'm trying to force all content to be submitted for review. That means that if a user updates an already published page, that the update would be pending until someone else approves it. I don't see ...
0
votes
1answer
273 views

Run only on plug-in activation instead of wp_head

I have below function on my plugin which adds more capabilities to current user. // Role setting for add media function wh_edit_roles(){ if ( current_user_can( 'edit_posts' ) ){ $user = ...
0
votes
1answer
206 views

Using media-upload.php - requires user to have edit_posts capability?

I'm integrating an image upload action, on the options page for my plugin. It works, but the thickbox dialog sits with a message "crunching" and never completes. Checking the console in Firebug ...
1
vote
1answer
519 views

Admin custom option screen not saved unless user manage_options capability

I am running into exactly the problem described by this Trac: https://core.trac.wordpress.org/ticket/14365 I see that one of the devs added a Diff here: https://core.trac.wordpress.org/attachment/...
1
vote
2answers
487 views

Limit role to one plugin [duplicate]

Is there a way to do this without using another plugin and without modifying WP core code: I want to give the custom plugin I am writing a settings page. So I will need to add plugin capabilities to ...
1
vote
2answers
4k views

How to change in customizer the “site identity” tab required capabilities

I'm building a multisite in which site admins have no "manage options" capability. The problem is that withut this cap they cannot see the "site identity" tab in the customizer, where they can change ...
1
vote
0answers
437 views

Allow user to only access custom post type

I am starting to get comfortable with Custom Post Types, but I don´t get the capabilities for them right. I have something like this: // define capabilities... $capabilities_werden = array( '...
0
votes
1answer
81 views

Changing capability type without altering plugin

This is probably easy but if someone could help me that would be great: I'm planning on using the "Reusable Text Blocks" plugin on several Wordpress sites. I'm going to use this on sites that only ...
0
votes
1answer
498 views

Wp custom post custom capability not working togather

I am trying to make a custom post type editable by a group of people (i.e. The users department) instead of only the author. I don't want to let them edit posts created by people of other groups(...
8
votes
2answers
6k views

What do unfiltered_html and unfiltered_upload actually filter?

Among WordPress' capabilities are unfiltered_html and unfiltered_upload, however I have yet to find any documentation about what specifically they allow or prevent in their filtering. The only ...
1
vote
1answer
631 views

What capability allows someone to change a page's/post's author?

I know that by default that administrators and editors can change the author of a page/post, but those with an author role can't. What role capability allows this? Is there a way to give this ...
1
vote
1answer
1k views

current_user_can() return FALSE but debugging says TRUE

BACKGROUND I have created a must-use plugin where I keep general functions. Like register_post_type(). Here I've created several Custom Post Types. With the help of several really good posts, I ...
2
votes
0answers
61 views

How to restrict access to specific pages on the back-end?

Before anything... I understand how roles and capabilities work. And there are tons of plugins that help you manage those. Roles and capabilities can only be so specific though. Is there "wordpress ...
0
votes
1answer
63 views

Let editors view post in admin but not be able to perform a save/edit

In a current project I need to be able to restrict access to posts by comparing the post's language against the languages a user has access to. This, I'm certain I can achieve. However, even if a ...
10
votes
3answers
870 views

What is valid timing of using current_user_can() and related functions?

During the vanilla WP core load the current user is being set up in $wp-init() which is after theme load and before init hook. This is in line with good practice of functionality getting hooked to ...
0
votes
1answer
54 views

Weird capabilities / roles behavior

I've been playing with the custom post types capabilities and some behaviors remains really mysticals for me. The Setup Say you have a Custom Post Type (CPT) called show for defining a radio ...
0
votes
1answer
625 views

Add capability to a role , so user is only able to view his own posts

I have created a user role vendor. Right now i am able to give the capabilities to the users, to be able to only edit,delete etc But then the user sees all the posts irrespective of who is the ...
1
vote
2answers
65 views

Restricted user capabilities cannot add image

I have restricted a users capabilities $capabilities = array( 'delete_posts' => true, 'delete_published_posts' => true, 'edit_posts' => true, '...
3
votes
1answer
5k views

current_user_can( 'edit_post', $post_id ) does not work for contributer but for administrator

I have a custom post type named ÷project÷ which has 'capability_type' => 'post' while registering using ÷register_post_type÷. in my theme files and also functions.php file, I have situations where ...
0
votes
0answers
1k views

get user role value as a string from wp usermeta table into custom script

Just came accross while retriving wp_capabilities from wp_usermeta table, this returns serialize output a:1:{s:13:"administrator";b:1;} When i unserialized, it gives an array Array ( [administrator]...
2
votes
1answer
1k views

Shold I manually add 'cap' to admin role ?

I've created a role: $role = add_role( 'role', 'role', array('read' => true) ); and so created a cap: $role->add_cap( 'cap' ); after this I'd created a submenu in admin menu with 'cap' as ...

1 2 3 4 5 9