The admin toolbar is displayed for all users, including Subscribers. If it’s not appearing on your site, then you are likely be using a plugin that changes this behaviour. For example, WooCommerce hides the admin bar from users who do not have the edit_posts or manage_woocommerce, capability. They have a support article on disabling this … Read more
You have to register custom capabilities and then apply inside the register post type function function register_website_caps() { $admins = get_role( ‘administrator’ ); $admins->add_cap( ‘edit_website’ ); $admins->add_cap( ‘read_website’ ); $admins->add_cap( ‘delete_website’ ); $admins->add_cap( ‘edit_websites’ ); $admins->add_cap( ‘edit_others_websites’ ); $admins->add_cap( ‘publish_websites’ ); $admins->add_cap( ‘read_private_websites’ ); } add_action( ‘admin_init’, ‘register_website_caps’); // Creating the website post type function … Read more
first about the add_role you only need to run this once, so after you paste it in your functions.php and saved you can remove it and save again and the role will be there always. then about the author_can function, i really never use it so i can tell whats wrong but you can use … Read more
Untested, but should be easily extendable(or something you can take ideas from). function roles_have_cap( $roles = false, $cap ) { global $wp_roles; if( !isset( $wp_roles ) || !isset( $cap ) ) return false; if( !$roles ) $roles = array_keys( $wp_roles->roles ); if( !is_array( $roles ) ) $roles = array( $roles ); $hascap = array(); foreach( … Read more
From quick look at code the likely permissions check for that is edit_comment capability in edit_comment() function. Your options to remove that capability roughly are: customize the role with plugin, for example Members customize role with code, probably using remove cap functionality filter thiungs around map_meta_cap or user_has_cap if you need to achieve more elaborate … Read more
In your case best solution is create your own custm role and assign them only the capabilities you users need. Regarding wordpress, for what I can understand from your question the only cabability you should give them is read. In this way they will see only the profile. Problems start with the plugin, you don’t … Read more
You can simply use WP_User class. $user = new WP_User( $user_id ); foreach( $user->roles as $role ) { $role = get_role( $role ); if ( $role != null ) echo $role->name; } Read more about WP_User
Yes it can be good practice to check if a user is capable of doing something before doing something related in code. For example, don’t save a custom post type if the user doesn’t have the capabilities needed to do it, or don’t show certain things to users who don’t have the manage_options capability ( … Read more
You need the unfiltered_html capability to write JavaScript in post content. This is granted by default to administrators and editors. The better way would be to write a small plugin that provides you a shortcode: <?php /** * Plugin Name: WPSE 234978 – Provide shortcode for Sharpspring embed * Plugin URL: http://wordpress.stackexchange.com/q/234978/31323 * License: MIT … Read more
With you current_user_can call everything is just fine. The problem lies elsewhere… If you’ll take a look at Roles and Capabilities, you’ll see that there is no capability like edit_post. So your code is working correctly – admin can’t edit_post, because there is no such capability (unless it’s a custom capability registered by your code … Read more