[Resolved] Restricted access to CPT based on User roles

[Author]

Posts

[toolset-dave]

Hi,

I needed to restrict access to my CPT based on User roles, but it didn´t work as I expected. If I checked "Edit any", "Edit own", "Preview any" and "Read", the user with these specified permissions could not edit the CPT which was created by anyone else (only the ones the user created). I was trying to set up Custom Roles but nothing helped. Finally I have found https://toolset.com/forums/topic/access-isnt-granting-access-for-custom-roles/ and tried to bring the native WordPress "Post" type under Access control. Which helped to solve the problem. So my question is: Should the Access plugin work like this or is it a bug?

[Noman]

Hi,

Thank you for contacting Toolset support. This is actually not a bug, it works like this because some of access permissions are inherited from built-in WordPress permissions and capabilities. So we can say this is by design and how the Access plugin handles user role permissions.

Thank you

[toolset-dave]

Thanks for the explanation. But I couldn´t find it in documentation (i.e. here: https://toolset.com/documentation/user-guides/setting-access-control/). So maybe it would be useful to mention that standard WordPress Posts must be managed by Access (in documentation or in plugin). Also its confusing if I have to check "Manage by Access" on my CPT, not to have checked "Same read permission as posts" and also not checked "Use the default WordPress read permissions", but as you said, some permissions are still inherited from WordPress...

[Noman]

Ok thanks for the feedback, we will review and forward your suggestions to the doc team.

Have a great day, thanks

[toolset-dave]

Thank you!