I have a group post type setup where subscribers can create and manage their own groups on the front end. Groups have relationships with Post Type A and Post Type B using Toolset Relationships. Subscribers who own a group can connect posts using toolset relationship form in frontend but cannot disconnect them using [cred-delete-relationship].
The shortcode used:
[cred-delete-relationship role_items='$fromViews' relationship='group-posttypeA' redirect='self' type='link']
The problem is tied to Toolset Access control:
— If I do NOT give "edit any" permission for Post Type A and Post Type B to the subscriber role, they cannot see or use the remove button at all, even on their own groups.
— If I DO give "edit any" permission for Post Type A and Post Type B to the subscriber role, the remove button appears and works, but now they can remove connected posts from ANY group, including groups they do not own.
Example:
User A (subscriber) owns Group 1.
User B (subscriber) owns Group 2.
Both groups have Post Type A - "Grant X" connected to them.
With "edit any" enabled:
- User A can remove "Grant X" from Group 1 (correct — owns the group)
- User A can also remove "Grant X" from Group 2 (incorrect — does not own Group 2)
Without "edit any" enabled:
- User A cannot remove "Grant X" from Group 1 (incorrect — should be able to, since they own the group)
Expected behavior:
A subscriber should be able to disconnect related posts only from groups they own, without being able to disconnect anything from groups owned by other users.
Can you please share admin access details and problem URL where I can see the disconnect post link.
*** Please make a FULL BACKUP of your database and website.***
I would also eventually need to request temporary access (WP-Admin and FTP) to your site. Preferably to a test site where the problem has been replicated if possible in order to be of better help and check if some configurations might need to be changed.
I have set the next reply to private which means only you and I have access to it.
My issue is resolved , I used workaround. I added the if condition to show the remove shortcode only if they are author of the current page post ID , then it works as expected for groups.