Capabilities Missmatch

  • connectisl

    (@connectisl)


    1 week, 4 days ago

    We have a site with custom post types and roles with customised capabilities. Some of the users who shouldn’t be able to duplicate posts are seeing “Duplicate This” on the post edit screen who shouldn’t. When they click it they get the “Unauthorised access” screen from WordPress as they don’t have the capability to create posts of the custom post type.

    They don’t see “Duplicate This” on the post types listing page suggesting the correct capability checks are being done there.

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support Emma (Support Executive)

    (@emma1991)

    6 days, 14 hours ago

    Hi @connectisl ,

    Thank you for the detailed report! We can see what’s happening here – the capability check for the “Duplicate This” button on the post edit screen appears to be inconsistent with the one applied on the post listing page.

    Could you please share the following details so we can investigate further:

    • Your Duplicate Page plugin version
    • Your WordPress version
    • The custom post type name and the specific user role facing this issue
    • The capabilities assigned to that role
    • A screenshot of the “Duplicate This” button appearing on the post edit screen for the affected user

    This will help us reproduce the issue on our end and push a fix as quickly as possible. We appreciate your patience!

    Thanks,
    Duplicate Page Team

    Thread Starter connectisl

    (@connectisl)

    6 days, 9 hours ago

    Hi,

    I’ll provide as much detail as I can but will need to obfuscate some detail I can’t share.

    Duplicate Page plugin version: 4.5.9

    WordPress version: 7.0

    Custom post type name: foo-round

    The custom post type has these custom capabilities : edit_foo_round, read_foo_round, delete_foo_round, delete_foo_round, edit_foo_round, edit_others_foo_round, publish_foo_round and read_private_foo_round

    User role facing this issue: foo_manager

    Capabilities: read, edit_foo_round, edit_others_foo_round, delete_foo_round, publish_foo_round, read_private_foo_round and read_foo_round

    Sorry I can’t see a way to upload a screenshot here. Its appearing in the “Publish” block on the Edit Post screen for the post type. The link has the text “Duplicate This”. It appears in a row with a grey background between:

    • the section with labels for Status, Visibility and Published
    • the section with “move to bin” and “Update”

    Clicking “Duplicate This” brings up screen with grey brackground and then a white box with the text “Unauthorized Access.”

    Thanks
    Mark

    Plugin Support Emma (Support Executive)

    (@emma1991)

    6 days, 8 hours ago

    Hi @connectisl ,

    Thank you for the detailed information – that really helps!

    We have identified the issue and have a fix ready for you. Please download the patched version using the link below and install it manually by going to Plugins → Add New → Upload Plugin:

    📎 duplicate-page 2.zip

    Please check if this resolves the issue and let us know how it goes. We appreciate your patience!

    Thanks,
    Duplicate Page Team

    Thread Starter connectisl

    (@connectisl)

    6 days, 6 hours ago

    Hi,

    Unfortunately I’m still seeing the link to “Duplicate This” on the edit page after adding the new version of the plugin.

    Thanks

    Mark

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.