[Resolved] User cannot upload file on 'Media Add' button of CRED write form

[Author]

Posts

[seunghanL]

I created write post form by CRED post form for 'Subscriber' user.
They can write posts like a screenshot.
But They cannot upload file via 'Media Add' button on WYSIWYG form.
When they try upload the file, Message appear like this 'You don't have permission to attach files to this post'.

So, I did things below :

* First, Registerd members only can write that custom post type (called 'Tasting Diaries'). They only can read and delete their own post.

1. I gave the some permissions to 'Subscriber' user via 'Toolset Access Control'.
- Read / Preview any / Edit own / Delete own / Publish permission on Media, Post, Page, Custom post type (called 'Tasting Diaries'), Post Forms Front-end Access Group, User Forms Front-end Access Group

2. I gave the some permissions to 'Subscriber' user via 'User Role Editor'.
- Read, Unfiltered upload, Upload files, Delete/Edit/Publish posts, Delete/Edit published posts, Delete/Edit/Publish pages, Delete/Edit published pages, Delete/Edit/Publish/Read Media
- Delete/Edit/Publish 'Tasting Diaries'

Write Page : hidden link
Test account : tester / test123890

What should I do to solve this problem?

[Nigel Supporter Languages: English (English ) Spanish (Español ) Timezone: Europe/London (GMT+01:00)]

I checked your site and was able to see the problem, and so I set up a simple test installation where I was also able to reproduce the issue.

I could not find a variation of the Access settings that would enable a user with subscriber role to add media, and so I have escalated this thread so that our developers can investigate further and hopefully find a solution in time for the upcoming Toolset update.

When I hear from them I will let you know.

Thanks for your patience.

[seunghanL]

Hi, Nigel.
Thanks for your reply.

I resolved that.
Line 3000 code in '/plugins/types-access/includes/Helper.php' was a cause of problem.

2999 - // Not sure why we didn't use this mapping before
3000 - $capability_requested = self::wpcf_access_map_cap($capability_requested, $post_id, $user_id );

After I deleted that code on line 3000th, permission to upload file is working nomarlly.
I don't know what that code does mean, And how that code does affect whole plugin function.
Even you commented 'Not sure why we didn't use this mapping before'.
Please let me know deleting that code on the line 3000th if it is ok or not.
And what does that code mean?

[Nigel Supporter Languages: English (English ) Spanish (Español ) Timezone: Europe/London (GMT+01:00)]

I just wanted to let you know that the next release of Toolset is imminent and we want to do some more version with the latest update to confirm if it is still present. I will re-test but you might want to re-test your live site, too, because your workaround will be overwritten by the update.

[Nigel Supporter Languages: English (English ) Spanish (Español ) Timezone: Europe/London (GMT+01:00)]

Just to let you know we pushed the release of the updated Toolset plugins today.

I did some quick testing and it appears that this issue is fixed, if you want to try yourself and let me know.

[seunghanL]

My apologies for the late reply.
I cleared the seat for a week.

Anyway it works clearly.
After plugin updated, the problem is gone.
But, I have had another problem 🙁

Please check the next post :
https://toolset.com/forums/topic/some-errors-with-cred/