WordPress.org

1. iceq
   Member
   Posted 1 year ago #
   

   I believe WP network still have much to improve.

   I want my authors to be able to change their widgets, but without assigning them Administrator accounts, because that means (whish is silly), they will have acesss to the plugins that I as network admin installed in the network, and do not want changed, because it may compromise the network's security, especially that, some site-wide plugins are poor enough to show their settings for a specific (child) blog's admin !!

   So, how can I allow editors to access widges?
   OR
   how can I deny admins of blogs access to certain modules like, plugin settings, plugins, permalink structure, etc ?

   Thanx

2. iceq
   Member
   Posted 1 year ago #
   

   BTW, Role Scoper plugin does not work with admin dashboard modules, but on posts, pages, links cats, etc.

   Capability Manager works from within a specific child blog's dashboard, not the network admin's dashboard.

   Side question, how can I make a plugin's configuration appear on the network admin dash and not in a child admin's dash? like Capability Manager, to restrict the access of blog admins on site-wide ?

3. Ipstenu (Mika E.)
   Half-Elf Support Rogue & Mod
   Posted 1 year ago #
   

   Have you tried http://wordpress.org/extend/plugins/members/

4. iceq
   Member
   Posted 1 year ago #
   

   hi Ipstenu. i installed it. but there are no Members options in the network admin section.. only in a site's dashboard.. which means I cannot assign capabilities to the child sites at all !

   I dont believe there is nothing like that.. or am I not finding it?

5. Ipstenu (Mika E.)
   Half-Elf Support Rogue & Mod
   Posted 1 year ago #
   

   You can assign permissions PER site, not per network.

   On a 2 week re-read, though, you're a bit confused...

   I want my authors to be able to change their widgets, but without assigning them Administrator accounts, because that means (whish is silly), they will have acesss to the plugins that I as network admin installed in the network

   Yes and no. They will have access to all NON-Network Activated plugins. If you network activate a plugin, they can't do anything except use it. They can't turn it off.

   There are other plugins you can use to manage plugins and restrict them so some sites can't see the plugins at all.

   But if an admin isn't the admin of their site, why do they have a site in the first place?

6. iceq
   Member
   Posted 1 year ago #
   

   okay.. I start from your last poing: I dont want to assign them admin rights because they all never used nor managed a WP site.. and if they have access to settings like permalinks, or the plugins' settings, they may change something critical.. and that is why I want to allow them only to post posts and pages, and change basic settings like how comments are shown etc..

   For instance, I installed Authors widget which displays a photo of the author in the sidebar. If a user is not an admin he dont have access to widges, and therefore can't add his image when he first enters the dashboard. if he is an admin he can, but he may also play and tamper with the other settings..
   So what is the solution to this?
   Regarding your saying:
   They will have access to all NON-Network Activated plugins

   you seem to be sure since you capitalized the "NON" but I still have to ask, arent they supposed to have access to plugins which I Network activate and not the ones which are NON-Network activated !?

7. Ipstenu (Mika E.)
   Half-Elf Support Rogue & Mod
   Posted 1 year ago #
   

   There's a big difference between plugin activation (ie. turning on and off plugins) and plugin use. You've not clarified which one you're trying to prevent, so I'm trying to be specific with which one I mean :)

   I will posit this, however. You need to stop and think long and hard if you need MultiSite. If you just want people to make posts, but have no control over the rest of their sites (like adding users, customizing layouts etc), then don't give them MultiSIte. Use Members and give them each a Custom Post-Type to play with.

   But. If you need them to be able to play with appearance of the site, then you need them to be Admins, because there's more than just 'editing menus' that goes on and, yes, you need to teach them how to be an admin. None of us are born knowing how all this goes and yes, it's a learning curve, but you're going to be spending a lot of time re-inventing the wheels. By intention, WordPress doesn't restrict roles the way you want to, so even if you were running Single Site, you'd have a lot of work to let people edit posts/pages, AND control comment layout (which by the way is wrapped into theme editing and not it's own feature - save the number of comments per page and the nesting).

8. iceq
   Member
   Posted 1 year ago #
   

   Ipstenu, as always I really appreciate the time and effort you give me here.. thanx a lot.

   The issue is that as I said earlier, those are authors who not only dont know how to operate a website, but dont even want to!! that is why my next step is configuring WP to publush their posts that it recieves from specific email addresses just to save them the hassle involved in logging in and posting.. sending an email message for a no web savvy is much easier.. (it would be a nightmare if I couldnt do this lol).

   So thats all behind it.

   Anyway I think I am making some progress. The issue I had with the plugin Multisite Plugin Manager is that it did not show the plugins installed, and I could not control them. Turned out I have to network de-activate the plugins from native plugin management then enable them via the plugin (which is never mentioned anywhere at all!!).. so now I am enabling the plugins one by one, and those plugins that I dont want the users to access, I have not enabled at all.

   Still some more issues in the horizon. For instance I want to enable Intense Debate for all blogs.. it requires an account, do I have to go and put my own ID's account info in every single blog? it seems Yes, sadly..

   i will keep you updated.. PLEASE keep watching this topic. you are helping me alot :)

   I wish you'd enjoy your days and nights .. :)

9. iceq
   Member
   Posted 1 year ago #
   

   Regarding the plugins USE or plugins CONTROl you mentioned, I now think even ADMINS of child blogs are noy able to turn on/off plugins but only USE them and change ther settings if they are enabled for them, right?

   2- The settings of some plugins whose effects are not child blog-specific appear in child blogs. Can I be 100% sure and assured that whatever changes a child blog's admin makes to a plugin he can change the setting for, will not affect the network, and the other blogs?

10. Ipstenu (Mika E.)
    Half-Elf Support Rogue & Mod
    Posted 1 year ago #
    

    my next step is configuring WP to publush their posts that it recieves from specific email addresses just to save them the hassle involved in logging in and posting.

    FULL STOP. You cannot do that with MultiSite. At all. It doesn't work.

11. iceq
    Member
    Posted 1 year ago #
    

    Just wanted to give an example for question two:
    there is a plugin Defauly Blog which sets the options for every new blog that is created. It is very stupid that a child-blog's admin have access to its settings (this happened after I network-activated the plugin because I can't use it in the Network admin page otherwise).. So, if that admin of the child blog changes the settings, there is no reason to believe it WILL NOT affact all the blogs.. because the plugin controls the deafult settings for new blogs, and when he has access to its settings he can actually change it !

    EDIT: i wish it is possible to control the plugins allowed for each site as it is allowed to control the themes for each site from the network admin..

    EDIT: lol really can't I allow them to post via email? although it is available in single sites?

    Okay, I will have to teach them how to post hen :)

12. Ipstenu (Mika E.)
    Half-Elf Support Rogue & Mod
    Posted 1 year ago #
    

    EDIT: lol really can't I allow them to post via email? although it is available in single sites?

    Yeah, it's not available on MultiSite (it's a security hole and there's no easy/sustainable way to allow one email per blog).

    EDIT: i wish it is possible to control the plugins allowed for each site as it is allowed to control the themes for each site from the network admin..

    It is.

    PLUGIN MANAGMENT
    * http://wordpress.org/extend/plugins/exclude-plugins/
    * http://wordpress.org/extend/plugins/restrict-multisite-plugins/
    * http://wordpress.org/extend/plugins/plugins-enabler/
    * http://wordpress.org/extend/plugins/yd-wpmu-sitewide-options/

13. iceq
    Member
    Posted 1 year ago #
    

    I will certainly give them a try tomorrow. Thank very much. Do you meanwhile have any idea how to configure IntenseDebate for all blogs without having to create an account for each one or configure them to use my original account (which involves adding my username and password to the child blogs) ?
    I searched extensively, but it is not even mentioned !

14. Ipstenu (Mika E.)
    Half-Elf Support Rogue & Mod
    Posted 1 year ago #
    

    Hm. You MIGHT be able to do it if you hard code it into the plugin (like you can do with Akismet).

15. iceq
    Member
    Posted 1 year ago #
    

    I did Akismet before, which was simple, using this code in wp-config :
    

    /** DefineAkismet API Key */
    define('WPCOM_API_KEY','yourakismetkey');

    And putting my key in there.. but for ID, I am not sure how it should look like and what data it should include..

    The strange thing is that no body is talking about it on the whole google :)

16. Ipstenu (Mika E.)
    Half-Elf Support Rogue & Mod
    Posted 1 year ago #
    

    I don't use it myself :) Not for any reason past I like having my data under my thumb.

Topic Closed

This topic has been closed to new replies.