Restricted pages still directly accessible

  • PeterHl

    (@peterhl)


    8 years, 9 months ago

    I’m having the following issue: I can restrict the pages to logged in users by restricting access to certain roles and through the menu items. However I found that the same pages are still directly accessible after logging out (and clearing the cache) by typing the URLs in the address bar. I can’t use the shortcode [um_loggedin] because my theme keeps the page content in the front end (Nexusthemes).

    What can you suggest? In other respects it’s a nearly perfect plugin for what I need.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support Ultimate Member Support

    (@ultimatemembersupport)

    8 years, 8 months ago

    Hi @peterhl,

    What version of the Ultimate member do you have?
    This issue may be caused by the caching plugins or server side caching e.g. Varnish cache, CloudFlare or Memcached.
    You can also try to do a conflict test and see if this issue goes away.
    Here is the doc on how to do a conflict test.

    Regards.

    Thread Starter PeterHl

    (@peterhl)

    8 years, 8 months ago

    Hi,

    I’m using version 1.3.88. Let me assure you that I know nothing about dealing with server side caching. The page level access control based on roles does not work for me to solve this issue. For example, I have a page of documents in a folder structure (Memphis documents plugin) which I made accessible to a certain role, while another page with a full file listing should not be available to that role. Once logged in though as the first user type, I can now type in the permalink for the full file list and presto, the page is served up. I tried adding the shortcode [um_show_content roles=..], same problem. I cannot turn off the theme because it serves the pages through the front end. The document lists are served by the Mdocs plugin, so once again it would not be useful to turn that off.

    Any other ideas?
    Many thanks.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Restricted pages still directly accessible’ is closed to new replies.