Questions tagged [user-access]
The user-access tag has no usage guidance.
399
questions
0
votes
1
answer
65
views
Wordpress install checking permissions of user id 0
I'm getting the popular Sorry, you are not allowed to access this page. But I can't seem to find a solution for the cause of it on my blog setup. I've added the function
function check_user_perms( $...
- 101
1
vote
2
answers
5k
views
Plugin to restrict access to pages in wp-admin
I've searched all day for this and couldn't find a plugin that allow me to restrict the access to specific pages in the wp-admin backed by user role.
Example: I have several users on my website and I ...
- 13
1
vote
1
answer
156
views
Log all users out of all locations after 24 hours
Good day, experts. Please I need the code that can help me log all logged in users on my WordPress website out of all locations after a particular time.
This is what I have so far:
add_action('...
- 19
0
votes
1
answer
20
views
How can I change access permissions across many pages?
Is there a way to change who can access a large subset of pages at once?
0
votes
3
answers
93
views
How to change footer or <div> for different kinds of users in wordpress?
I am planning to make a website where non website members should see a different view of the footer.
Is this possible using css only?
- 69
0
votes
1
answer
18
views
How to direct my site to the proper URL without Dashboard
While messing around in the settings on the Dashboard, I changed the address of the site into a subdomain of the site. This means that WordPress forwards all links to a subdomain (ex: web.site/home ...
- 1
0
votes
2
answers
39
views
access control for assets in a website powered by wordpress
My organization has a website powered by wordpress. We are using pagebuilder to design pages. We also have some assets (pdf files, ppts) etc. Currently everyone can access these files.
I need to ...
- 101
0
votes
0
answers
133
views
Can I use core passworded page/post functions outside of wp-login.php?
I have several (client) sites that use security plugins that rewrite the standard wp-login.php access to something different, i.e. /myprivatelogin. (And yes, I know the issues about "obscurity is not ...
- 8,715
4
votes
1
answer
1k
views
Give editors access to particular plugin - turn "admin.php" into "edit.php"
I'm using the Business Opening Hours plugin. I made it appear in the sidebar using the Client Dash plugin, but when the Editor clicks it, they cannot access it, only the Admins, how can I change that?
...
- 41
1
vote
2
answers
1k
views
Hide everything on site for visitors except specific page IDs
I have a client who wants to close down access to the entire site, every post, category page, archive etc (while keeping the content), except for three specific pages (Start, about us, contact).
None ...
- 103
0
votes
2
answers
4k
views
User restricted only show posts assigned to current user
I have to make a site where i have to assign posts to users.
Want i already did:
1: made new user roles with only 'read' enabled
But i can't seem to figure out how to assign a certain post to a ...
- 139
1
vote
0
answers
34
views
Problem with the Loop - want to limit the access to three free articles
What I'm trying to do:
If anyone who is not logged in, reads an article, I will increase a session var by one. Save that article ID via global $post and save the $post->ID to an array. After 3 ...
- 11
0
votes
1
answer
575
views
throttle/limit a logged in user's http requests to specific page on a per day basis
I have a resource on my WordPress page that I only want to show X times per day per logged in user. I'm using the twenty sixteen WordPress theme.
Currently, Guests / visitors / non logged in users ...
- 125
-3
votes
1
answer
50
views
How to give different user access to different people?
I have a video tutorial website where I have to provide videos. For that purpose I have to give different user access to those who login to particular courses.
So can you please help me what is the ...
- 1
5
votes
1
answer
17k
views
How to get all capabilities of an existing user role
How can I get ALL the capabilities of an existing user role (eg. Author) ? I'll be using it to quickly duplicate an existing user role, then create a new role then assign or remove capabilities to a ...
- 1,067
1
vote
1
answer
970
views
Restrict the user access in multi site for non-assigned blogs
What is the better way to restrict a user of any role being logging into a blog of wordpress multisite network if he/she is not assigned to that particular blog as a user even though he is an ...
- 297
2
votes
2
answers
366
views
How to 'unpublish' or 'hide' posts when user role changes?
I'm working on a website that assigns different roles to different users - and I'm looking a functionality I would probably best describe as 'reverse access control':
First, users of role "A" are ...
- 823
0
votes
1
answer
101
views
Users are required to login to my site. How define user.member boolean, its permissions, and conditionally display/handle behavior based on it
Users are required to login to my site. They are redirected to the login page and not allowed past the login page until they authenticate. Once authenticated, they can access most of the website. ...
- 125
1
vote
3
answers
1k
views
Dangers to allowing Access-Control-Allow-Origin: * for Feeds only?
I want to use a function like this to allow access to the feeds from a variety of services but my knowledge of the security implications is limited. I think I'm being safe by limiting the access to ...
- 374
0
votes
0
answers
1k
views
How to bulk change user role to "No role for this site"
If I edit an individual user, the role dropdown menu has the option "— No role for this site —" (<option value="">— No role for this site —</option>):
However this option doesn't exist on ...
- 765
0
votes
1
answer
293
views
Wordpress Multisite FQDN Admin Access
I have a Wordpress multisite setup at http://in-autos.com and I have a sub-domain multisite structure and a FQDN http://billgattonsales.com
My trouble:
I can access the Admin area by visiting either ...
- 1
-2
votes
1
answer
911
views
One folder to be accessible by one user
so I am making wordpress website and the idea is that I want to upload different files for the different users but I want the user to see only his files.The problem is that when I copy the url that ...
0
votes
1
answer
240
views
Redirect admin 403 "Cheatin uh?" admin pages
Blocking role capabilities on the admin returns the 403 "Cheatin Uh?" page.
What is the best way to redirect this to 403 page to perhaps the dashboard, homepage, or a custom 403 page?
I know I could ...
- 4,379
-1
votes
1
answer
1k
views
You do not have permission to access this document on form submit
I have few little problem. If i submitted the user credential for login no matter login detail correct or incorrect page goes to Forbidden on submit button. What i do for this problem
Forbidden page ...
- 247
4
votes
1
answer
2k
views
REST API: How can I restrict a custom post type to only be accessible by authenticated users?
I have a custom post type configured to be accessible via the WP Rest API v2.
How do I lock the access to this custom post type so that only the authenticated users can perform GET requests?
- 1,176
0
votes
1
answer
418
views
Restrict Access to the User Profile
What I want is, give different Roles different kind of access to the user profile. For example, I want to show the section "Name" but not the section "Contact information".
From other sections I just ...
- 101
0
votes
1
answer
44
views
Signed-in as admin on just part of the site
I recently upgraded from WP 3.1 to 4.4.1. In the new setup, I am apparently seen as signed-in (as an admin) just on parts of the website (/blog/*) but not on other pages (that do not have the /blog/ ...
- 101
0
votes
1
answer
27
views
How do I get the access type in WordPress?
How do I get the access type (from desktop or mobile) in WordPress?
Here is a possible solution posted here.
function yundanran_get_access_type()
{
$is_wap=false;
$user_agent = $_SERVER['...
- 233
0
votes
1
answer
255
views
Ask logged in user to re-enter password to access page "x"
For security reasons, I want to request logged in users to re-enter their passwords to access certain pages on my the site.
How can I accomplish this?
I'm using Wordpress 4.4
- 1
1
vote
1
answer
504
views
Create custom post with custom user rules
I am create a custom user post type testimonial and want to give permission to user to edit and delete there post but its show some error.
1. I created user rule.
function ...
- 249
0
votes
0
answers
721
views
Restrict access to custom post type and filter from every query
I created a custom post type topic which is just for internal use. I managed to assign the correct capabilities so that users of certain roles can edit/publish/delete posts.
Now I want to redirect ...
- 533
0
votes
1
answer
212
views
How can I create a custom plugin that allows anonymous users to signup without registering?
I am very new to wordpress. I want to create a small Booking System as a plugin. I have 5 different pages for entering details step by step and Users can book as anonymous. Admin only need a mail with ...
- 101
1
vote
1
answer
3k
views
Redirect non-admin users away from wp-admin/index.php (main dashboard page) to wp-admin/profile.php
I've set it so non-admin user can't see the "Dashboard" link or can't have access to the main "wp-admin/index.php" page. I've also added a plugin that restrict non-admin users from creating a new page....
- 83
0
votes
0
answers
31
views
How do I control the list of Pages an author can see?
Using one of the role managers,I enabled Authors to edit/create Pages).
The edit/create pages screen shows a tree of all the pages in the system.
Is there a way for (beside going into the core) To ...
0
votes
1
answer
138
views
post acces for guests / unregistered users only
is there a way to restrict complete posts/pages to be viewed by guest (unregistered) users only, hide them from subscribers/logged in users? These posts shouldn't show up in category archive pages for ...
- 1
0
votes
1
answer
347
views
Unique password to access a section site
I am working on a wordpress site. I am selling a digital course on it. Users interested in the course will pay locally via bank and send me payment details.
So after I confirm their payment I will ...
4
votes
1
answer
3k
views
Using JWT to authenticate a user with an external system?
We have a WordPress application which is going to be linked with a parent system. We want to use JWT for authenticating with the parent. The idea is, if the user is not logged in on the parent, he ...
- 8,494
1
vote
0
answers
38
views
How to add a private user page populated from sql?
I have taken over management of a Boy Scout website for around 75 kids. The site is a vanilla WordPress site and has no access control (other than admin).
I would like a scout/parent to be able to ...
- 111
1
vote
3
answers
1k
views
Why does get_posts only show results for Admins or logged-out users?
I use a get_posts() call with these arguments:
array(6) {
["include"]=> string(14) "1633,1634,1635"
["post_status"]=> string(3) "any"
["post_type"]=> string(10) "attachment"
[...
0
votes
1
answer
706
views
remove wp admin menu by customer user role
I have a custom user that i'm trying to minimize access for. I have a few admin menus in the toolbar that I'd like removed but only for this customer user role. I currently have it working for ...
- 3
2
votes
1
answer
2k
views
Set default page for user account in admin
I have set up an ecommerce site using wordpress/woocommerce and am now adding the users who will be dealing with the orders to the site. The only part of the site that they need to have access to is ...
- 23
0
votes
1
answer
68
views
Username has been exposed
I am running a WordPress installation, I am using the theme created by my own. I haven't displayed any author related information in the theme. But I am getting server logs with domain/author/author-...
- 141
0
votes
1
answer
571
views
How can hackers access WP usernames? [duplicate]
Recently I've had brute force attack attempts on some of my WordPress sites and the attackers are using actual usernames other than the default admin (which was removed).
How is it possible for them ...
- 1
2
votes
1
answer
2k
views
How can I allow access to two user accounts using one login?
I have spent the last two hours searching for this and I cannot find a solution to my problem.
I have a WP site with WooCommerce running which allows to users to create their own store.
My client ...
- 233
1
vote
0
answers
189
views
Where are $current_user->allcaps set?
I recently found a problem with WP in which even the admin has no permission to get to anything on /wp-admin/. Oddly enough, when I compared the $current_user->allcaps to those on a normal site, I ...
- 432
0
votes
1
answer
380
views
How to List only the users created by a particular user
How can I list only the users created by any particular logged in user.
Suppose,I'm a Subscriber and there are users already registered, I then added User1(as Associate), User2(as Subscriber). When I ...
- 11
2
votes
1
answer
6k
views
Managing Users and Creating Groups [closed]
We're going to be transitioning from a small, outdated CMS that's no longer supported, to WordPress for our new CMS. Our old CMS allows us to restrict access on the back-end so that by default User A ...
- 765
2
votes
1
answer
375
views
Let new user role to 'edit_others_posts' of other user role, not of its own type
In my system, I'm making two new roles:
Third Party (TP) (lesser privileges)
Data Entry Operator (DEO) (powerful over Third Party - but not of its own group)
My CPT 'capabilities' parameter is ...
- 12.7k
7
votes
1
answer
18k
views
Can an admin check passwords of registered users?
I have a site where I open accounts for users and hand over login credentials to them.
Now, Let's say that a user forgot his password, and wants to reset it. He clicks "Lost your password?" link on ...
- 248
0
votes
0
answers
957
views
How to block direct access to files upload in edd folder
My site server on a shared web hosting service with Cpanel and NGINX. I want to block direct access to files upload in the easy digital downloads upload folder ( wp-content/uploads/edd ). I use ....
- 153