Possible authz enhancements
-
Currently those with administrator, editor or author roles all get full access to all tables as setup in the add_access_capabilities of class TablePress_Options_Model. It would be good to be able to control in the Dashboard settings which roles get full access. I think this should be a very small amount of code to add.
Quite independently of the suggestion above I would like to be able to get the “normal” wordpress behaviour that authors can’t mess with other people’s work but that you need the editor role to do that. Inspired by a piece of code that Tobias sent me does anybody see a problem with using the tablepress_map_meta_caps to prevent someone who has neither administrator role nor editor role from editing a table which they did not create. I am presuming that the creator of a table is known though I have not yet delved sufficiently into the code to find out.
- The topic ‘Possible authz enhancements’ is closed to new replies.