WordPress.org

Support

Support » Plugins and Hacks » [Resolved] Users assigning roles higher than their own

[Resolved] Users assigning roles higher than their own

  • Hi.
    I would like to make it so a user can only assign roles up to his level. For example, an editor with the ability to create users shouldn’t be able to create a user with the role as “Administrator” (which is higher than his own role). Is this possible with this plugin? I have failed to find that. Please help

    http://wordpress.org/extend/plugins/user-role-editor/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Vladimir Garagulya

    @shinephp

    Hi,

    User Role Editor takes care about this potential problem. Non-admin user with ‘edit_users’ capability doesn’t see “Administrator” role in roles selection list and any users with “Administrator” role in the users list. Thus such user can not assign “Administrator” role to anybody and can not delete other users who have “Administrator” role. More, URE plugin block direct call for manually built URLs for user with admin role deletion, if current user has no admin role.
    In case you got other situation at your site, please describe it in details in order I can reproduce it and make the fix.

    Regards,
    Vladimir.

    Thanks a lot Vladimir!
    It seems to be working just fine right now. I think maybe it is because I activated the plugin, setup user roles then deactivated the plugin but continued to use the roles. Maybe something got mixed up there but I appreciate the response.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘[Resolved] Users assigning roles higher than their own’ is closed to new replies.