[Resolved] Editor with permission can't delete CPT-posts

[Author]

Posts

[Dido]

Since a while, the user with the Editor role can't delete posts from a certain post type he is responsable for. I can't find why this occurs. He get's a message that he has no permission to see the page after clicking on delete.

[Mateus Getulio]

Hello, can you tell me if this CPT in question is in a post relationship with any other posts? If so, what are the permissions for the editor role in the related post types? For example, if this CPT1 is in a post relationship with another post type like CPT2 then what are the custom role permissions for CPT2?

Also, can you please review the editor roles in Toolset Access and make sure it has the permission "Delete own posts using Toolset Forms" enabled?

Thank you, please let me know.

[Dido]

Hi Matteus,

Before the start of this problem, the user was able to manage the CPT.
And yes, there are relationships with other CPT's.

All permissions are the same. I added even more permissions. This was not the solution.
The form is also ok

[Mateus Getulio]

Hello Dido,

Do you remember if there was a specific action before the issue started happening, like a plugin update, an edition of the CPT or user role or something along these lines?

Can you please let me know what CPT is having this issue in order for me to investigate it?

I would like to request temporary access (wp-admin and FTP) to your site to take better look at the issue. You will find the needed fields for this below the comment area when you log in to leave your next reply. The information you will enter is private which means only you and I can see and have access to it.

Our Debugging Procedures

I will be checking various settings in the backend to see if the issue can be resolved. Although I won't be making changes that affect the live site, it is still good practice to backup the site before providing us access. In the event that we do need to debug the site further, I will duplicate the site and work in a separate, local development environment to avoid affecting the live site.

Privacy and Security Policy

We have strict policies regarding privacy and access to your information. Please see:
https://wpml.org/purchase/support-policy/privacy-and-security-when-providing-debug-information-for-support/

**IMPORTANT**

- Please make a backup of site files and database before providing us access.
- If you do not see the wp-admin/FTP fields this means your post & website login details will be made PUBLIC. DO NOT post your website details unless you see the required wp-admin/FTP fields. If you do not, please ask me to enable the private box. The private box looks like this: hidden link

Please, let me know if you need any additional details. Have a nice day.

[Mateus Getulio]

Hello Dido,

I submitted a new message to test this out but I couldn't locate the view or page where the edit form is located.

I checked a few views but so far I couldn't reproduce this issue.

Can you please share the link to the page where deleting the post cause the permission error to display?

Thank you!

[Dido]

hi Mateus,

When I am loggedin as Didotest, I cannot delete a post on hidden link.

the view is here hidden link

[Mateus Getulio]

Hello Dido,

I checked that view but I didn't find a delete button.

I went ahead and editted it and added the following code:

[cred-delete-post action='trash' onsuccess='self']Delete[/cred-delete-post]

After that, I tested it and I'm able to delete the messages logged in aseither an administrator or editor. As soon as the message is deleted, the page refreshes without errors and the message is not showed anymore.

I tested without being logged in and with other roles and the delete button won't work in those cases.

Can you please review it to make sure it is working as expected now?

If I misunderstood your inquiry, please let me know and I'll reassess.

Thank you!
Mateus

[Dido]

Thank you, Mateus.
It works on the frontend indeed.
my struggle was in the backend and there it still doensn't work.

isn't that strange? However, we can use the delete button on the frontend in the future.

[Mateus Getulio]

Hello Dido,

I checked it and the issue seems related to the plugin Fusion Builder from Avada, if it is temporarily disabled, then there's no permission issue.

I believe that it might be necessary to add some custom Avada capabilities to the role Editor in order for it to be able to delete and/or edit messages from the backend.

It is possible to add custom permissions in Toolset Access > Custom Roles > Advanced mode > Editor > Change permissions > Custom capabilities

Would you kindly be able to reach out to Avada support and check if there might be some custom capabilities that we could add to the role Editor in order to fix this issue?

Thank you, please let me know.
Mateus

[Dido]

hi Mateus,

Thank you for letting me know. I am happy with this solution so far.