Custom Post Type Capability gives me access to ALL Posts

  • kennedyd

    (@kennedyd)


    1 month ago

    Hi, I have installed the plugin and everything seems fine. However, when I go to Users -> User Role Editor and select my post type (Board Posts) under – Custom Post Types, I see the check box listing:

    create_posts
    delete_others_posts
    delete_posts
    delete_private_posts
    delete_published_posts
    edit_others_posts

    etc etc

    I then select the ones I want and press update (which unlike all of your screenshots is not blue, but grey…if that points to anything), I then get the pop-up “Confirm – Please confirm permissions update” to which I click Yes.

    When I then go to the user and click to see their capabilities, all the plugin does is give them access to ALL the posts, i.e. edit_posts rather than what I would expect to see which is a series of checkboxes labelled:

    edit_board_post
    edit_published_board_post
    edit_other_board_post

    etc etc

    Please note I am using the ultimate member plugin as well, but even when I set a role up outside of this, it still fails.

    Any ideas, help is fantastic.

    Andy

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Vladimir Garagulya

    (@shinephp)

    1 month ago

    Hi Andy,
    Every custom post type (CPT) has capability type, ‘post’ by default. If do not change capability type during CPT definition to something unique, like ‘board_post’, such CPT will be protected by the same set of capabilities (edit_posts, edit_publish_posts, etc.). So if you grant to a role the list of capabilities generated for the ‘post’ capability type, such role automatically receive access to alll CPTs which uses the same capability type ‘post’.

    Plugin Author Vladimir Garagulya

    (@shinephp)

    1 month ago

    Read this article for more details:
    https://www.role-editor.com/documentation/manage-access-to-custom-post-types/

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.