Will this be patched soon?

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/leira-roles/roles-capabilities-119-reflected-cross-site-scripting

hi,leira
I’ve used the “Roles and Abilities” plugin that you guys developed and it does work well, but I’ve found a few issues that I hope will help you improve the plugin

1. If we want to delete a character, the page pops up a dialog box, at which point we choose either Cancel or OK, and we end up deleting the character automatically, which I think is a horrible mistake, because I actually lost that option!
2. In the list of default roles in wordpress core, super admin quick edit, we will find that there are some permissions that are not all selected, such as add_users, edit_comment, we actually have these permissions
3. In the list of roles, the default role names in the wordpress core are still in English, we prefer that these names can follow the translation of the wordpress core to be displayed
4. In wordpress core there are some permissions that have been deprecated, is it possible to add an option to hide these permissions.
   I hope I can help make this plugin healthier, good luck and peace!

Does this plugin not support custom user roles?
Thanks,
-Kirk II

Your plugin works great, but I have a Reviews plugin installed that I need to allow capabilities for, but can’t find it on the list. How do I go about finding this?

Hi,

woocommerce blocks my new user role to access the backend. The following filter allows it for all users which also does not fit my needs.

https://docs.woocommerce.com/document/allowing-customer-access-to-wp-admin-and-enabling-the-admin-bar/

This answer (https://stackoverflow.com/a/48332692/9036446) says to allow access the user role needs the following capabilities to access the wp-admin area: ‘edit_posts’, ‘manage_woocommerce’, ‘view_admin_dashboard’

Unfortunately the “view_admin_dashboard” permissions is not available. Any idea how to give new user roles access to the wp-admin?

Hi,

Your plugin seems very interesting and very simple at first sight.

Before to download and use, I just want to be sure it will fulfill our needs.

We actually operate a Multisites on a WordPress v.5.6.2 installation.
From the start, we have 2 questions that are important for us:

1. Actually, contrary to what your screenshots show, our version of WordPress doesn’t show any ‘Role’ and/or ‘Posts’ columns in the “Users” list screen.
If I refer to the WordPress ‘/wp-admin/includes/class-wp-users-list-table.php’ file, it seems that the display of these infos are “deprecated” since WP version 4.4.0 for security reasons.

(* @since 4.2.0 The$style` parameter was deprecated.
* @since 4.4.0 The $role parameter was deprecated.
*
* @param WP_User $user_object The current user object.
* @param string $style Deprecated. Not used.
* @param string $role Deprecated. Not used.`
)

So, my main question is : If I install your plugin, will these 2 columns be reinstated (showing up again) ?

2. When I click on a User to see/edit his settings/profile, I can’t see what is his role, nor that I can change his role amongst the 5 main roles supported by WordPress.
The only thing I can do is grant him “‘Super Admin’ privileges for the network”.

So, If I install your plugin, will I be able to see at which Role category the user belongs, and will I be able to change its ‘role’ through that screen ?

Thank you in advance for your answers to these questions from our part.

Hi,

I used your plugin to see if it’s suitable for the theme I have. I amended the editor role. unfortunately it wasn’t giving the capability what I was looking for, but this is more a Theme fault.

After I removed the plugin, the editor’s capabilities stay changed. It doesn’t reset the settings. Any idea where I can reset these settings or can find them in the database?

With thanks,
Demian

I have used these plugin and have added new roles named writer and also give him permission. Permission is working for that user but after it is not redirecting to dashboard. it is redirecting to the website home page. and redirecting is working for admin, editor and author.
I have also update WordPress may be that’s the reason for it.It was working before updating.
Please help me on it.
Thanks

• This topic was modified 4 years, 6 months ago by tanu2529.