[Gelöst] How do I restrict fields and access buttons from regular users?
This support ticket is created vor 7 Jahren, 8 Monaten. There's a good chance that you are reading advice that it now obsolete.
This is the technical support forum for Toolset - a suite of plugins for developing WordPress sites without writing PHP.
Everyone can read this forum, but only Toolset clients can post in it. Toolset support works 6 days per week, 19 hours per day.
Heute stehen keine Supporter zur Arbeit im Werkzeugsatz-Forum zur Verfügung. Sie können gern Tickets erstellen, die wir bearbeiten werden, sobald wir online sind. Vielen Dank für Ihr Verständnis.
In the screenshot you can see these two buttons next to Add Media button, but I do not want regular users to see those two buttons. How do I restrict them?
We already have a report of this which occurs under specific circumstances, where the form has the "Allow Media Insert" button checked, and where the users have higher roles.
What is the role of the users who will be accessing this form?
The buttons are visible to users with a role of author or higher. (As administrator, you would see these buttons, but if your users have a lesser role they may not.)
I am escalating this thread and adding it to the existing internal ticket. In the meantime, if your form does not need the "Allow Media Insert" button, disabling it will also remove the unwanted buttons.
I heard back from the developers that the buttons were made visible on the front-end to users with a role of author or above by design.
I believe the rationale for the change relates to making Toolset work with front-end page-builders.
They agreed that the current implementation probably needs improving so that the appearance of the buttons is optional, and what changes to make are currently being discussed.
There are some undocumented filters you can use to disable the buttons.
Here is some sample code to do that (which you will need to add to your theme's functions.php file or using a plugin such as Code Snippets).
/**
* Remove Toolset buttons on front-end editors
* which appear for role author+ when insert
* media option set on CRED forms
*
* The filters work globally, so you will need
* to add a test, e.g. for the page where the
* CRED form is added
*/
function remove_toolset_buttons(){
// $post not available with init hook
$postID = url_to_postid( $_SERVER['REQUEST_URI'] , '_wpg_def_keyword', true );
if ( 19 == $postID ) {
// remove the Fields and Views button
add_filter( 'toolset_editor_add_form_buttons', '__return_false' );
// remove the CRED button
add_filter( 'toolset_cred_button_before_print', '__return_false' );
// remove the Access button for certain roles
add_filter( 'toolset_editor_add_access_button', function(){
$roles = array( 'author' );
return $roles;
} );
}
}
add_action( 'init', 'remove_toolset_buttons' );
Not that you must include a test for where you want to disable the buttons (e.g. in the code above they are being disabled for page with id of 19), otherwise they will be disabled globally.
Sorry for the inconvenience, we will hopefully have a more user friendly solution before too long.
