WordPress.org

1. skippy
   Member
   Posted 7 years ago #

   wp-admin/post.php does not check the user levels assigned in menu.php.
   I edited menu.php and raised both Write and Edit from 1 to 3. I then created a test user and assigned that test user level 1. I logged out from my admin account, logged in with the new test account. I was granted access to post.php, and was able to post a new entry to the blog.
   The "default" case in the post.php case statement has this single check:
   if ($user_level > 0) {
   I can't see in post.php where it checks actions against the levels assigned in menu.php. It looks like menu.php is only for constructing the menu links.

2. Icyshard
   Member
   Posted 7 years ago #

   I believe you're right about the menu.php only being for constructing the menu links. I was able to edit the post.php file though to match the settings I made in menu.php. There are several instances that appear in the file, but just find all the instances that have $user_level > and then change the number to whatever you find appropriate. Once you set them above 1, when a user with a level of 1 logs in, they won't automatically be shown the post entry screen.
   You might also want to change this paragraph to reflect the appropriate level you have set:
   "Since you’re a newcomer, you’ll have to wait for an admin to raise your level to 1, in order to be authorized to post blog items."

3. shawne
   Member
   Posted 6 years ago #

   i am having a lot of problems with this bug too (wp 2.0). i dont want my contributors to see 'dashboard' or 'manage' items on their post/admin screen. any suggestions for a workaround for these items?

   also, i dont see this bug listed in trac bug db. can someone with access please file the bug.

   thanks,

   -shawn

Topic Closed

This topic has been closed to new replies.