WPFront
  • Home
  • Plugins
    • Notification Bar Plugin
      • Plugin Ideas
      • Plugin Settings
      • Plugin FAQ
    • Scroll Top Plugin
      • Plugin Settings
      • Plugin FAQ
    • User Role Editor Plugin
      • Plugin Documentation
      • Plugin Settings
      • Plugin FAQ
    • Paddle Gateway Plugin
  • Go Pro
  • Support
    • Documentation
    • FAQ
  • Affiliates
  • Contact
  • Login
  • Cart
  • This topic has 3 replies, 3 voices, and was last updated 9 years, 11 months ago by Gary Gordon.
Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • May 23, 2015 at 11:49 am #9736
    John Fridinger
    Spectator

    Perhaps I am misunderstanding the description of this new ability, but why would a site administrator want someone with lesser permissions to be able to give someone else greater permissions than they the giver has…?

    And beyond that what would prevent someone from having two different user logins without anyone knowing, and give themselves permissions all the way up to and including all the permissions of an Administrator…?

    May 23, 2015 at 12:26 pm #9742
    Syam Mohan
    Keymaster

    Hi John,

    “why would a site administrator want someone with lesser permissions to be able to give someone else greater permissions than they the giver has…?” is a very good question and that’s exactly why this new feature is required. The default functionality of WordPress allows any user with promote_users capability to promote any user to any role including Administrator. For example if Subscribers get promote_users capability, they can promote themselves to Administrators. This new feature allows you to limit that capability so that they cannot promote anyone to a higher level.

    I really don’t think an Administrator will create a public website where anyone can register and promote themselves to Administrator. I would never create an account in such a website, because I don’t want others to steal my information. For example anyone can create an account in wpfront.com by purchasing the product but they cannot promote themselves to Administrator. But if I want a user to have the permission to manage a few other users I can easily do that with this new feature.

    Thanks

    Syam

    May 23, 2015 at 4:51 pm #9746
    John Fridinger
    Spectator

    Ok, that clears it up for me… 🙂

    May 23, 2015 at 5:22 pm #9748
    Gary Gordon
    Participant

    Thanks for the clarification as well.
    Gary Gordon

  • Author
    Posts
Viewing 4 posts - 1 through 4 (of 4 total)
  • The topic ‘New update, User Level Permissions…’ is closed to new replies.
Log In
Lost Password

Search Topics

Documentation

FAQ
Roles List Add Role Edit Role Delete Role Restore Role Add or Remove Capability Assign/Migrate Users Posts/Pages Extended Permissions Custom Post Type Permissions Navigation Menu Permissions Widget Permissions Admin Menu Editor Media/Attachment File Permissions User Level Permissions Content Restriction Shortcodes Login Redirect Export Roles Import Roles Bulk Edit Settings Multisite Roles List Multisite Add New Role Multisite Edit Role Multisite Delete Role Multisite Restore Role Multisite Sync Roles Multisite Settings WordPress Capabilities Actions and Filters Installation Instructions