BanHammer available for ALL registered users?!

  • Resolved ruzakuku

    (@ruzakuku)


    7 years, 2 months ago

    Hello,
    We were using BanHammer, when a registered user (basic role, subscriber, nothing else) told us that he can access the settings page, see all blocked words, change them, etc.
    We quickly stopped using it…. How is that possible!?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Ipstenu (Mika Epstein)

    (@ipstenu)

    ?????? Advisor and Activist

    I tested on a single site really quickly and even if I manually go to example.com/wp-admin/tools.php?page=ban-hammer as a subscriber, I get “Sorry, you are not allowed to access this page.” so… Out of the box, no, this plugin is working fine.

    Have you made any edits to what a subscriber can or cannot do? The user level requirement is “if they can edit comments” so if you let all users edit/moderate comments, that would do it.

    Thread Starter ruzakuku

    (@ruzakuku)

    Ah, got it! The user with which I was testing has the capacity “moderate_comment”. I removed it and all is normal now. (And by the way the moderate_comments alone does not work LOL)

    Thank you for the help… and for your plugin ??

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘BanHammer available for ALL registered users?!’ is closed to new replies.