Groups overrides wp-config's DISALLOW_FILE_EDIT setting

Yep. After activate this plugin DISALLOW_FILE_EDIT const stop working. Seems like manipulating with do_not_allow capability. This plugin have many strange stuff inside. I dig into this issue on my site. Let me know if you find something.

Link manager also appears with this plugin. Damn.

No answer from the author?

There’s a workaround for this:

Dashboard > Groups > Options
Untick “Administrators override all access permissions derived from Groups capabilities.”
Save.

(That will do what it suggests though, and not allow to you access posts etc. if you’re not in the correct group, even as a WordPress administrator).

I believe the problem is with:
/groups/lib/core/class-groups-user.php and the if statement in line 225. What’s odd is that in capabilities.php in WordPress core, DISALLOW_FILE_EDIT is only used for edit_files, edit_plugins and edit_themes, however none of these are apparently checked when viewing the editor page, so adding something like:

&& $capability !== 'edit_files'
&& $capability !== 'edit_themes'
&& $capability !== 'edit_plugins'

to the conditional in class-groups-user.php makes no difference.

Anyone see what I’m missing? Am I looking in the wrong place?

William

Haha. The author of plugin dont have public repository or just email address to contact with them. I think to write a review with one star.

Hi Koiya,
you have available the public repository in wordpress: https://plugins.svn.www.ads-software.com/groups/
If you need support, you can use the plugin’s page comments system ( https://www.itthinx.com/plugins/groups/ )
Thanks,
Antonio B.

Thank you Antonio ??

By the way – I found something interesting. If uncheck “Administrators override all access permissions derived from Groups capabilities.” then file editors goes away (if you setup disallow file edit conts). This checkbox placed at “Groups options” page.