Topic Tag: Custom roles

Problem:
Toolset offers to add promote_user to any user role, and that is a security issue

Solution:
This is not a security issue, it is under the Websmasters responsibility to decide wether or not a certain user(role) can be trusted so to assign promote_user

We do however take in consideration feature requests submitted on https://toolset.com/home/contact-us/suggest-a-new-feature-for-toolset/, which can request to put in place additional (and configurable) settings to control better what precise users the user with promote_user rights can upgrade.
Please submit a Feature Request on the above link, if you want this to appear in Toolset Access

Problem:
Hide template lyout box and astra settings for non admins

Solution:
To remove the Template Layout box for non-Admin - you should try to add the following code to your current theme's functions.php file.

add_action( 'admin_head', 'func_remove_layout_astra_metabox', 20);
function func_remove_layout_astra_metabox() {
 
global $current_user;
  
         if(!in_array('administrator',(array)$current_user->roles)){
 
         remove_meta_box( 'wpddl_template', array("student"), 'side' ); 
         remove_meta_box( 'astra_settings_meta_box', array("student"), 'side' ); 
         }
}

You can find the proposed solution, in this case, with the following reply:
https://toolset.com/es/forums/topic/hide-template-lyout-box-and-astra-settings-for-non-admins/#post-1228494

Relevant Documentation:
https://codex.wordpress.org/Function_Reference/remove_meta_box