Search citations in account by User Role
-
Hi.
At the moment, when an user searches citations inside Gutenberg edit post, the capabilities the user must have to view/browse citations in select dropdown are exactly the same as posts capabilities. In other words, if the user has access to Zotpress Reference section while editing posts, he/she can browse citations freely in any of the user/group accounts listed.This generates a problem: some users are able to browse in Zotero accounts they shouldn’t be supposed to. The plugin assumes every WordPress user can access every Zotero account listed. Hiding Zotpress Reference section in Gutenberg by user or user-role (with third-party Advanced Gutenberg plugin) doesn’t solve the problem, because users which shouldn’t browse in few accounts now can’t browse in any account at all.
Proposed solution: To create a plugin option in a new column on Accounts Settings page, so we can define which user roles (or single users) are trusted to “view/select_this_account”, in each added Zotero account. The consequence is: now the accounts in which user can browse are only those granted by his/her user role.
Variation of the proposed solution: Add capabilities to “access_users_accounts” and “access_groups_accounts”, so we can define in third-party plugin which user role can access which Zotero accounts. (less restriction and defined outside zotpress plugin)
Variation of the proposed solution: We may choose to assign a Zotero account to a single user as a meta value, in this case by exclusion no other users can access it anymore. (or a password field)
At the moment I am going to disable this plugin, because a single account shouldn’t be chosen by other users, and there is no alternative for me. But this is the best plugin for Zotero, due to its simplicity and ease-of-use. I want to use it forever. Could you implement this change that improves privacy? Extra feedback: I miss citations appearing inside Gutenberg (as words, not as code). With Gutenberg improving APIs, please keep an eye on that. “Gutenberg Forms” plugin seems to have achieved this kind of feature of updating dynamic results in real time when switching views. I also miss adding and editing citations in Zotero accounts from WordPress, even if only the basic registration. Maybe laying out Zotero accounts by user roles or user is what is missing to unlock it?
Github community may help you if you define this milestone there.
- The topic ‘Search citations in account by User Role’ is closed to new replies.