WordPress.org

1. adam1
   Member
   Posted 2 years ago #

   Hi everyone,

   I recently became the admin of a blog using WordPress 2.5. I may upgrade to 2.8 soon, but I believe this discussion will be the same either way. Currently, we use user levels to restrict access to certain portions of the blog. However, I understand user levels is a legacy feature that may be removed from future releases so I should make the change to "roles." I believe I can do the below with a plugin to edit the roles, but I would love to get some advice first. The blog is setup like a typical website and we have portions under "about" that we would like to only allow certain users to access. My goals are:

   (1) No user other than the admin can make posts to the blog, edit those posts, or promote other users.
   (2) We can have at least four categories for access levels to portions of the website.
   (3) If possible, I would like to setup the website so that the links under "about" are viewable to all, and when clicked on will display a different page depending on the user role. The goal is to have four categories with increasing levels of access and on one of the links allow only some content to the lowest level and display additional content to the higher levels. Currently, I have a page that is public that has different links to pages. Higher levels have access to all links and lower levels receive a 404 message when they click on a page with a higher level than they are authorized to view.

   Can I do all of this with "roles" and should I? Additionally, what happens when a user's "role" does not line up with the user level? Example, if a user is an administrator, but has a user level of 2, rather than 10, does he act like a user level of 2 or like an administrator?

   Thanks again for all the help!! I've done a bit of searching, but I'm such a new user for WordPress that I don't understand a lot of what I am reading.

2. adam1
   Member
   Posted 2 years ago #

   bump. Anyone know? Thanks!

3. Justin Tadlock
   Member
   Posted 2 years ago #

   First, please don't bump topics here. It is against the forum rules.

   Now, before you do anything, you need to upgrade to version 2.8.4 of WordPress. You're running an extremely insecure version.

   ---

   Yes, user levels are a legacy feature. Capabilities have replaced them. You can read more about roles and capabilities here:
   http://codex.wordpress.org/Roles_and_Capabilities

4. adam1
   Member
   Posted 2 years ago #

   Thanks Greenshady, I didn't realize it was against the rules. There is so much activity here that it is very easy to drop several pages without people seeing the post.

   I updated my blog to the newest version and switched everything over to using roles and capabilities. I also used Role Scoper to make custom roles which do most of what I am looking for. I was able to create one page only viewable to one role and another page viewable only to another role so that the role with a more advanced "level" doesn't have to see the lower "level" post that contains only information already recited in the more advanced level.

   However, I would like to create a page that is only accessible to low level users and unregistered users that says they need to be the higher level to access content. Right now, that page is accessible to the higher level users as well, which doesn't make much sense. Do you know any way to make that page inaccessible to higher level users by using Role Scoper or any other plugin?

   Thanks again for all the help!

Topic Closed

This topic has been closed to new replies.