I solved it myself 🙂 I just added custom capability to the user- $user = new WP_User(1); //1 is the admin ID $user->add_cap( ‘see_encrypted_pass’ ); Then checked- if(current_user_can(‘see_encrypted_pass’)){ //encrypted password } It works!!
You’re using the admin_init hook to add menus – use admin_menu instead. The init hook runs early enough for wp-admin/menu.php to add it to the sidebar menu, but not for the plugin page loading in wp-admin/admin.php In other words, when you actually try to load the plugin page, your menu code hasn’t fired and WordPress … Read more
Found it! I was missing one custom capability. To the code above, I added this line: $rol->add_cap( ‘edit_’ . $cap[0] ); It gives the capability edit_ctpsinglename. (edit_pb_publicacion). And now it works just fine. Hope someone find’s this useful.
$capa is a PHP expression and will always evaluate to administrator. Use the capability read instead – every role (by default) has this.
Contributor has the following capabilities delete_posts edit_posts read You can create the “Seller” role to have same capabilities as Contributor add_role( ‘seller’, __( ‘Seller’ ), array( ‘read’ => true, ‘edit_posts’ => true, ‘delete_posts’ => true, ) ); Warning from codex NB: This setting is saved to the database (in table wp_options, field wp_user_roles), so it … Read more
First of all you need to remove capability edit_others_posts if assigned to vendor role. Then use the code snippet given below: function posts_for_current_author($query) { global $pagenow; if( ‘edit.php’ != $pagenow || !$query->is_admin ) return $query; if( !current_user_can( ‘edit_others_posts’ ) ) { global $user_ID; $query->set(‘author’, $user_ID ); } return $query; } add_filter(‘pre_get_posts’, ‘posts_for_current_author’); Above code allows … Read more
How about remove_meta_box( $id, $page, $context );? https://codex.wordpress.org/Function_Reference/remove_meta_box This will remove the Publish meta box which contains the save button… function disable_save() { if( !current_user_can( ‘edit_post’ ) ) { // Or whatever check you need to make remove_meta_box( ‘submitdiv’, ‘your-chosen-post-type’, ‘side’ ); } } // disable_save add_action( ‘admin_menu’, ‘disable_save’ );
It appears that wordpress does not check the edit_post capability while saving. Instead it checks for the author. So I used a hack to override the author id. So, wordpress thinks you are changing the author and works by first changing the author to your own id. You can add this code below in your … Read more
It was a simple thing when thinking of it… I needed to add: $role->add_cap( ‘edit_others_pages ‘ );
Sounds like this is what you’re running into. admin_page_access_denied may be the hook you want to use for this. try function dont_show_cheatin_page() { if ( current_user_can( ‘do_not_allow’ ) ) { wp_safe_redirect( admin_url()); // custom redirect instead of Cheatin 403 page exit; } } add_action(‘admin_page_access_denied’, ‘dont_show_cheatin_page’);