I copied the Administrator Role. Posts were under access control with everything checked (see image). They are only able to View or Bin posts that do not belong to them. If I revoke Managed by Access then the role can successfully Edit, Quick Edit, View and Bin posts by other authors.
1. I created a new Custom Role - copying the rules from the Administrator
2. I logged in as such an user, and created native WordPress Posts.
I notice that even thou this user is an Administrator, I can:
- add new posts
- delete, view, edit, and quick edit the user's own new posts
- trash and view other's posts.
While the symptoms are seemingly not the same as on your install, it is still wrong.
Administrators should be just that: Administrators.
The capabilities "edit_others_pages and edit_others_posts" are active for this role.
Please can you confirm the symptoms once again with the above data?
If your issue is different, please provide me a Duplicator Package.
https://toolset.com/faq/provide-supporters-copy-site/
I will meanwhile report this error I saw.
I just wanted to ask a confirmation.
1. I installed WordPress and Types + Access
2. Created a custom role "custom_role" and copied the Administrator
3. Set the native Post Type Posts under Access Control
4. Created a user of that new role
This new user can edit, add, trash any post, just as expected.
But, this is not true for Custom Post Types.
If I set up a custom post type, then those Posts I cannot edit as the new user.
I then created a new post in that post type as the new user, and then it started working.
As long there is only one post of another user, then it does not work.
As soon the Custom post type is removed from Access Control, native posts also start to work.
So, the issue here is only replicable if:
- you have a Custom Post Type
- a custom role copied from administrator
- control native and custom posts with access
- have only one custom post or post in the list.
It's with the Developers now.
OK, thanks. Re your first response, that seems the same symptoms.
- trash and view other's posts.
I would expect the administrator to be able to edit others posts too.
So, the issue here is only replicable if:
- you have a Custom Post Type
- a custom role copied from administrator
- control native and custom posts with access
- have only one custom post or post in the list.
Agreed, in my case, to clarify, the new administrator didn't have any posts belonging to them, though there were many posts by others.
Let me know if you'd like me to do some more testing or look at something in particular.
We have an erratum with a workaround now:
https://toolset.com/errata/custom-user-role-not-allowed-to-edit-others-post-even-if-set-so-in-access/
It is not a BUG solution but shows how to avoid the issue (by creating a post each post type for the user).
I'd like to keep this open so I can note when bug fix applied.
Sure, I put this ticket in "escalated to 2nd Tier" and will inform you once there are updates.
This is solved in Access 2.7
