Questions tagged [permissions]
for questions regarding permissions of different user groups in wordpress
417
questions
0
votes
0
answers
24
views
Accessing an auth protected custom WP API enpoint from remote origin
I'm creating a Chrome browser extension that connects to a WordPress through its custom REST API endpoints. Retrieving data types that don't require an authorized user to be logged in works fine, as ...
0
votes
0
answers
20
views
Permission to edit media files (photo captions, alt tags)
What permission is required for a user to be able to edit all media files in Wordpress?
I'm trying to edit the captions and alt tags of some media files in Wordpress. I can see the media file in the &...
- 121
0
votes
0
answers
12
views
How to disallow users to edit other's posts for a new custom post type?
I am trying to add a new custom post type and everything works except one thing - contributors can edit other's post of this post type. Here is how I've registered it:
/**
* Adding new "Series&...
- 101
0
votes
1
answer
67
views
Hardening WordPress - how to set .htaccess permissions?
I have been reading about File Permissions in Hardening WordPress on wordpress.org
When it comes to .htaccess, the guide currently says
The root WordPress directory: all files should be writable only ...
- 225
0
votes
0
answers
106
views
WP Permission still set to Not Writable after I change the permission for the whole folder and files
I have change permission via FTP but still not working
Need help!!
- 1
0
votes
1
answer
28
views
How to stop login for SPECIFIC users BEFORE a specified date
I'm developing a membership website (using Memberpress) and want to send the login information to some users before the site goes live. I want these specific users to be UNABLE to login BEFORE my ...
- 11
0
votes
1
answer
128
views
Gravity Forms and Gravity View Permissions
I have a pretty direct question. I am trying to figure out how to programmatically prevent users from being able to view other users' form submissions. Currently, using Gravity View, any logged in ...
- 1
0
votes
0
answers
198
views
current_user_can() returning true for capability when the user and role do not have the capability
I've been trying to remove the "Customize" from the admin bar by removing the capability from the 'tt_editor' role by adding this to the bottom of the init action function:
$editor = ...
0
votes
1
answer
666
views
User Capabilities are not available in WP REST permission callback?
I want to only permit the execution of specific admin tasks for users who are
currently logged in to the wp admin panel (via is_user_logged_in) and who
have a specific capability (via ...
- 487
0
votes
1
answer
51
views
Prevent all users from editing posts except admins using hooks
So I'm attempting to block out all post edits for all users except admins, so I have the following setup:
add_filter('post_row_actions', [self::class, 'remove_edit_permissions'], 10, 2);
public ...
- 25
0
votes
1
answer
38
views
Prevent posts with certain post_meta to be edited
So I am looking at adding some custom post_meta to posts and I want those posts to not be editable, which will be some content that I am pulling in.
Here is what I have:
I have solved the issues when ...
- 3
0
votes
0
answers
70
views
Custom Role read_private_posts Not Working
I've created a custom role via add_role, it's in my activation hook and is being removed on deactivation, thus I'm deactivating and reactivating my plugin to see the role permission changes. I can see ...
- 561
0
votes
1
answer
51
views
Which wordpress should be obligatory writeable?
Lately, I have run in some security problems due to vulnerabilities in plugins. For this reason, I want to have a restrictive permission scheme unless i wish to install plugin or update wordpress.
...
- 437
0
votes
0
answers
47
views
Profile image does not upload
when i logged in "Font-End" as a user "Employer" and try to upload my profile image, it does uploaded but when i click update i got this alert error " No editor could be ...
- 11
0
votes
0
answers
59
views
Why "Mine" is the default view when adding 'capability_type' in register_post_type
I'm tweaking default's wordpress permissions by adding my own via the capability_type and map_meta_cap in register_post_type(), but I noticed that as soon I add the capability_type argument, the ...
- 11
0
votes
1
answer
501
views
How to disable admin/editor access to specific user's posts
Hoping someone can offer some code snippet I can use to block other Admins or Editors from editing MY posts.....I use only the Text Editor, but when other users go into my Posts using the Visual ...
- 418
0
votes
2
answers
585
views
How to disable Author dropdown in Gutenberg's Status and Visibility panel
I recently noticed a new feature in the Gutenberg editor (I'm guessing introduced in Wordpress 5.8) that seemingly allows any user to post as any other user:
I confirmed that using this new option, a ...
- 297
1
vote
1
answer
185
views
Function not working inside of a function in functions.php
I have the following function adapted from Christine's answer here that works perfectly on its own to hide panels/metaboxes in the Gutenberg editor:
function irm_gutenberg_register_files() {
...
- 297
0
votes
3
answers
2k
views
WordPress sites being filled with random PHP files
Two weeks ago when I tried to access one of my WordPress sites through the browser, I was redirected to an ad page. I went inside of the public_html directory and found tons of PHP files with random ...
- 101
0
votes
1
answer
312
views
custom plugin not visible to some user roles
My plugin have minimum configuration like below.I can see plugin via WP admin under woocommerce main menu.but cannot see plugin from different role.That role can see woocommerce submenu.Only my custom ...
0
votes
1
answer
92
views
Can't Change the default theme on WordPress by BitnamI running on AWS
After installing a WordPress server on AWS using 'bitnami-wordpress-5.7.2' as the instance, now I am not able to change the default theme using the wp-admin. When I try to activate or live preview a ...
0
votes
0
answers
367
views
See which user role / capability is needed to use a plugin
I have installed a plugin (https://de.wordpress.org/plugins/food-and-drink-menu/) for which I want to assign permissions to a normal "editor" user.
I found the plugin "User Role Editor&...
- 154
0
votes
0
answers
45
views
How to make file not open to public but javascript file under Wordpress folder can load it
I have one csv file for Wordpress using. It put under my theme folder. I don't want that open to public but only a js file under the theme folder can read it and retrive data.
How should I set the ...
- 101
0
votes
1
answer
17k
views
WordPress Update - This is usually due to inconsistent file permissions.: wp-admin/includes/update-core.php
I have some WordPress websites server with root access, and at the time of creating the server, everything was fine and WordPress itself and plugins and themes were updating without any issues, but I'...
- 109
0
votes
0
answers
168
views
Block access to plugins.php for custom role
So I have a custom role and I'd like to block access to the plugins.php page without using a plugin.
I can remove pages from the admin menu with my functions file but not sure how to restrict access
- 11
1
vote
1
answer
3k
views
permission_callback has no effect
WP version is 5.5.3
I have 3 API routes set in a plugin that is used in an admin dashboard page. One route is meant to be used "publicly".
I have two very curious issues happening:
My 3 ...
0
votes
0
answers
19
views
Opening a file of the theme from outside
I have a problem.
I want to open a file that is in the active theme. Actually, I have a link that is shown in an admin menu, and when I click the link I want to redirect to a file that is stored in ...
0
votes
0
answers
64
views
Show posts who published after registration date
i will make a membership system in WordPress with indeed ultimate membership pro and I would like users not to see posts that were made before the date they registered.
I want: They can still see the ...
0
votes
1
answer
190
views
Adding prefix to WordPress database tables breaks admin capabilities?
I have attempted a few different ways (manually, using Brozzme's DB Prefix Tools & Addons plugin) to add a prefix to an older WP database (right now table names look like posts instead of wp_posts ...
- 315
0
votes
1
answer
171
views
Allow Editor access to a certain plugin
WordPress Capabilities has always confused me, as you cannot allow granular access of certain roles to certain features. (Coming from a Drupal background)
I have the WordPress Carousel plugin ...
- 167
0
votes
1
answer
284
views
Filter DELETE REST API calls
I have a custom post type, that can be editable by more than one user.
Each post of that type has a field with the user ids who can edit it (kinda like co-authors).
But since many users have ...
- 105
0
votes
1
answer
951
views
No user found when using REST API
When I use a REST route whilst logged in, and call wp_get_current_user(), no user is found. However, the request method, eg POST is processed without issue. Example REST route registration.
...
- 170
0
votes
0
answers
13
views
Visitors "do not have permission to view this content" on home page only
This problem started suddenly. The navigation and all the other pages are still ok.
I built a new home page, simply by duplicating my old one, and then set home page to my new page. That didn't help.
...
- 1
0
votes
1
answer
168
views
Permissions Script Not Working
I am running a LAMP dev environment on ubuntu 18.04 with wordpress 5.4.2. I found this awesome script meant to make adjusting permissions on wordpress installations easy, getting rid of 403 errors in ...
- 153
4
votes
3
answers
2k
views
Add new user : make the fields First Name and Last name required
I'm searching how to make First Name and Last name fields required when we add a new user. Right now only username and Email fields are required.
I found a way by adding class="form-required"...
- 344
1
vote
0
answers
30
views
WordPress unable to create folders even though correct NTFS-rights are set
We are trying different NTFS-rights settings on a IIS-webserver, and we removed the Users-group from the folder containing all the sites.
We then ran into the problem that a WordPress installation ...
- 11
0
votes
1
answer
169
views
How to hold posts and accounts for moderation on WordPress Network site
In WordPress MU is there a way for a network admin to hold posts in moderation?
For example:
A user creates an account and a site
They create their first post
The post is held in moderation and the ...
- 960
2
votes
0
answers
102
views
Registration and Custom Post Types - How to synchronize information?
I am building a platform where service providers can offer their services to potential customers. Therefore, I have two user roles, one "customer" who can only create an account and read; ...
- 21
0
votes
0
answers
32
views
WordPress Multisite Layered Admins
I'm using WordPress multisite for a company project. The project have 5 multilevel admin structure with about 100 websites.
The top level (5) admin (super admin) have access to all the sites.
The ...
- 111
1
vote
1
answer
203
views
Wordpress Local Install Theme Folder Permission To Edit
I have installed WordPress on a local LAMP installation. All I want is to edit the theme files locally on an editor like VS Code where I can open the theme folder and start editing on the go.
But I ...
- 113
0
votes
0
answers
325
views
Wordpress does not have the permission to update (IspConfig)
When I try to update a Wordpress website on a server I do not own since it is from an hosting provider. I am getting an error I never had.
Translated to English (it is Dutch)
Download update from ...
- 101
5
votes
1
answer
14k
views
ftp_nlist() and ftp_pwd() warnings
I'm not sure when this warning started. I got an existing site to do its hosting and applied the following good practices:
Updated Wordpress - from 5.3 to 5.4.0 (current WP version)
Updated all ...
- 311
1
vote
0
answers
22
views
Fix permissions for users role
I have 4 users roles on my WordPress platform (role1, role2, role3, role4)
Role 1 : administaror (full acces)
Role 2 : proposal_editor (can create and publish posts, pages,
templates, users...)
Role ...
- 344
0
votes
0
answers
44
views
Blank White page issue in WordPress
I am working in a WordPress site in Linux Mint. My file and folder permission is like below
I used below code in wp-config.php file
define( 'WP_DEBUG', true );
define( 'WP_DEBUG_LOG', true );
...
- 417
2
votes
1
answer
700
views
Programmatically allow a non-author to edit a post based custom meta field
User A authored and published a post. In that post, User A selected User B as the "Manager" (a custom meta field).
How can I allow User B to edit any post in which they are selected as the "Manager"?...
- 131
0
votes
1
answer
160
views
Make custom post type archive for administrator only
Simply I have made a custom post type named ticket and have created an archive-ticket.php file I want to make if the user that tries to visit the tickets archive page is not administrator redirect him/...
- 13
0
votes
1
answer
303
views
Plugin updates, change file permissions on WordPress
I have a strange problem with my wordpress websites. Every time I perform plugin updates, the file permissions on my server, are changed. I get the Forbidden error in my developer console for the ...
0
votes
0
answers
3k
views
admin-ajax.php 403 errors - no caching, permissions are fine
After putting up a recent dev site, I'm met with a very annoying 403 error I can't figure out. It's only an issue with non-WP core widgets (for example, Recent Posts Extended) and I can't add scripts ...
- 81
1
vote
1
answer
186
views
How create a role with admin capability less 1 or 2?
I've created a new role and I need to give this role the full permissions and capability of an admin less create new admin user and edit plugin/themes. Is possible recall all and remove only the 3 I ...
- 47
0
votes
2
answers
353
views
Wordpress won't allow for updates to plugins or Wordpress Core
It's been approximately a month since i can no longer update any plugins or wordpress core on my website. When I attempt to update the website it get's knocked off line. Jetpack then reactivates the ...
- 101