[Resolved] Capabilities required to edit custom code snippets

[Author]

Posts

[Ben]

Continuation of this ticket: https://toolset.com/forums/topic/urgent-capabilities-required-to-edit-custom-code-snippets/

Due to an issue found here (https://toolset.com/forums/topic/internal-security-issue-with-access-permissions/), I cannot use Access at the moment.

Using Advanced Access Manager, the "delete_user" capability seems to be what enables a role to be able modify or edit custom code snippets.

Without this enabled an error is thrown.

[Shane]

Hi Ben,

I took a read of the ticket you've referenced.

Not sure how this is happening for you but when you create your role you should just be able to disable the manage_options from your user role.

However what you are saying is that the user will still have access to the custom code section of toolset to grant themselve this permissions correct

Please let me know.
Thanks,
Shane

[Ben]

Hello Shane,

The other ticket is reference the issue with Access.

This one is reference that I have found when I use another plugin to control roles and access, the role needs to have the "delete_user" capability otherwise they can't edit or modify Toolset custom code snippets in any way (even if "manage_options" is enabled).

Please let me know if that makes more sense now!

[Shane]

Hi Ben,

I see that Christian has taken up your ticket relating to this.

I recognise the issue but i'm not sure under what circumstances you would provide this level of a privilege to a user unless they are admin users.

Or is it a case where you want to provide partial access to our toolset components.

Please let me know.

Thanks
Shane

[Ben]

Hello Shane,

The sort of situation where you want a user to have full "admin" access to the Toolset plugin suite, but not have admin access over the WordPress installation.

So they can use Toolset fully, Views etc, but not modify the site outside of posts, pages, CPTs and toolset. To prevent plugin/theme/any other changes to the site.

[Shane]

Hi Ben,

It seems that Christian is following the exact steps that I would've done for this ticket.
https://toolset.com/forums/topic/internal-security-issue-with-access-permissions/

I would recommend closing this one here since it is more or less a duplicate of the actual issue and follow up with Christian.

Thanks,
Shane

[Ben]

Thanks Shane. I will follow up there.