[Resolved] Block completely backend access to a user role

[Author]

Posts

[stephaneG-5]

Tell us what you are trying to do?

I have a website where users can post a recipe. I deal with their post and registration on the frontend. So I want to block completely their access to the backend. How can we do that?

Is there any documentation that you are following?

I've searched on the forums and read that it's possible, but nothing explains how to do that.

[Christian Cox]

It's possible with custom code, but Toolset does not provide this ability out-of-the-box. Here's a code example showing how to restrict users in a single role from the admin:

add_action( 'admin_init', 'restrict_admin_with_redirect', 1 );
function restrict_admin_with_redirect() {
  $user = wp_get_current_user();
    $roles = $user->roles;
    $role = array_shift($roles);
    if ( $role == 'hide-from-role-slug' && ( ! defined( 'DOING_AJAX' ) || ! DOING_AJAX ) ) {
        wp_redirect( site_url() );
        exit;
    }
}

Replace hide-from-role-slug with the slug of the role you want to restrict.

Then you'll probably want to hide the admin bar as well. I have an example here:

add_filter('show_admin_bar', 'hide_for_roles_func');
function hide_for_roles_func(){
  if( is_user_logged_in() ){
    $user = wp_get_current_user();
    $roles = $user->roles;
    $role = array_shift($roles);
    if( $role == 'hide-from-role-slug' ){
        return false;
    } else {
      return user_can( $user, 'manage_options');
    }
  }
  return false;

}

Replace 'hide-from-role-slug' with the slug of the role you want to restrict.

[stephaneG-5]

Thanks you!

The menu bar is hidden, but the backend is still accessible. I guess I should add a filter for the function restrict_admin_with_redirect()

Which filter should I use?

[Christian Cox]

Ah yes, sorry. Copy + paste error. You can add like this:

add_action( 'admin_init', 'restrict_admin_with_redirect', 1 );

[stephaneG-5]

My issue is resolved now. Thank you!

I think Toolset should consider adding this to the user role settings. It could be two check boxes : one for the backend acccess and the other for the admin tool bar.