Conflict with WooCommerce 2.3.6 ?

Here’s what I’ve been able to recreate:

1. If the Contributor role is modified (by CME or any other means) to exclude the edit_posts capability, WooCommerce blocks all access to wp-admin, redirecting to the Account page defined in Woo settings.
2. Users with the default Subscriber role (also lacking edit_posts) are also blocked from wp-admin.
3. The wp-admin blockage is applied by WC_Admin::prevent_admin_access(), via a wp_safe_redirect() call. If the Account page has not yet been configured, wp_safe_redirect() is called with a nullstring url argument. This is the cause of the white screen.
4. The activation status of the Capability Manager Enhanced plugin has no effect on the white screen condition.

The logic of requiring the edit_posts capability is problematic for installations that are customized with users who should access custom post types but not posts. You’ll have to take that up with Woo support.

I would expect the Woo team to provide a fix for the nullstring redirect issue, though they may give it a low priority since the error only occurs with incomplete WooCommerce configuration. For now, it’s possible to work around the white screen in code by adding a filter to ‘woocommerce_get_myaccount_page_permalink’, changing a nullstring redirect value to site_url(”).

Another workaround strategy is to filter both ‘woocommerce_prevent_admin_access’ and ‘woocommerce_disable_admin_bar’, returning a value of false.

Hi Kevin,

Thankyou very much for investigating this issue. I really appreciate it. The Woo team have been really unhelpful (basically dismissive) so far. I will pass on your findings.

Best regards,

Melissa.

Hi,

there’s an issue with WC from 2.3.6 on, where users without edit_posts capability get redirected from wp-admin to my-account after login. This happens IF you have set a page as my-account. If you do not, you get a blank page like you describe.

You can check if you have a page set to my-account. If you don’t have any set, what you are experiencing is the issue above resulting in a valid but blank page and not a white death page (php error/timeout).

If this is it, it’s explained here: update-causes-wp-admin-redirect-to-my-account

The redirect to Account page is intentional in the Woo code. If you want to prevent it, hook into the filters I mentioned, returning false.