I had the same issue, main users have the contributor role and a simple sidebar comment sidebar widget was not working when logged-in! Strange. I solved it by some sql: function getLatestComments ( $postid ) { global $wpdb; $sql = “SELECT * from $wpdb->comments WHERE comment_post_ID = $postid AND comment_approved = 1 ORDER BY comment_ID … Read more
You could install one of many plugins like this to restrict access for different user roles http://wordpress.org/plugins/advanced-access-manager/ Or you could remove the admin menu links to any items you want for a specific user using PHP code.
Capabilites not working [closed]
This is an easy fix by simply using $_REQUEST instead of $_GET in your hidden field for register_form. More importantly, you should be sanitizing the field before you echo it, otherwise you’re wide open to injection and CSRF: <?php if ( isset( $_REQUEST[‘role’] ) ) echo esc_attr( $_REQUEST[‘role’] ) ?>
How to restrict access to specific pages on the back-end?
You are using the right WP function but unfortunately not passing the right parameter to make this work for you. current_user_can() accepts capabilities as well as roles as parameters. In the above you are using roles and not capabilities. You can use capabilities to make it work. For example, if you want the minimum privilege … Read more
The edit_others_posts capability should allow users to set the author of a post. At first glance you might reply that you don’t want your authors to be able to edit one another’s posts. The difference in ability is very subtle though: writing a post and then assigning it to another user isn’t much different from … Read more
Allow role to edit users at lower level with only specific metadata
Add custom capabilities to existing custom post type
Keep user’s privileges on accessing contents in JSON response