Role Manager

What does Role Manager do?

WordPress Version 2.0 introduces the concept of Roles. Each Role is allowed to perform a set of tasks called Capabilities. This Plugin allows you to define and manage multiple subscriber profiles - called Roles and their Capabilities. Also you can create new Roles and Capabilities.

If you use this Plugin to manage your Wordpress, Users can belong to only one role and can have individual capabilities assigned to them outside of the context of a role.

News and recent changes

The latest stable release of “Role Manager” here is Version 2.2.3.

This Version of Role Manager Plugin is tested and works from Version 2.0.x up to Version 2.6.x of WordPress.

Since Version 2.2.3 also moved wp-content-directories (a WordPress 2.6. feature) are supported

Version 2.2. introduces many new features to the Role Manager. Some of them are:

  • using 4 single pages: one for roles, one for capabilities, one for general information and statistics and one as a short internal help page
  • role- and capability-names are now restricted to a maximum length of 30 signs
  • only chars, digits and spaces are allowed for role- nad capability-names
  • every transaction using a check for max length of 30 and allowed signs
  • now it is very easy to copy an existing role
  • for using the Role Manager a extra capability (”Manage Roles”) is needed
  • and many more …

Some of the new functions you can see at some screenshots.

Version 2.2.1 introduced a new configuration option to permit spaces in capability names for other plugins (please read also this post about the problem with spaces).

Known Issues

No Issues are known.

Donload and Installation

  1. Download the “Role Manager” Plugin
  2. Make a new directory “role-manager” under wp-content/plugins
  3. Unzip the downloaded file and copy all included files in the new directory
  4. Activate the Plugin at your WordPress “Plugins”-Tab
  5. Ready!

Other download-ressources
SourceForge.net LogoThe “Role Manager” Plugin using for development the services from sourceforge.net. At the project-download-page at sourceforge you can also find the latest stable release. More about the development you can read in the next section on this page.

More Ressources about the Role Manager at im web gefunden

General using Roles and Capabilities

For developer - also other plugin-authors - and translator

Other Ressources (external)

History and Changelog

The original Role Manager Plugin is written by David House and Owen Winkler. You can download this from Redalt. But it doesn’t work with Version 2.1 of WordPress

Version 2.2.2 to 2.2.3
+ support for moved wp-content directory
+ file includes are changed to fix some issues user reported
+ the changed include should prevent some problems with anarchy media plugin

+ updated english help and french translation
Version 2.2.1 to 2.2.2
+ support for the new admin interface of WordPress 2.5
+ updated japanese translation
Version 2.2.0 to 2.2.1
+ configuration option to permit spaces in capability names
Version 2.0.9 to 2.2.0
+ too many changes to list all here, sorry.
Version 2.0.8 to 2.0.9
+ changed the call for load_plugin_textdomain
  - now works fine with gengo (fix the bug from comment #162 and #197)
+ add persian (farsi) translation
+ implemented an experimental patch for WordPress-MU (see this comment)
Version 2.0.7 to 2.0.8
+ Fixed the issue with wp_enqueue_script in older WordPress-Versions
Version 2.0.5 to 2.0.7
+ Ajax is now working
+ some minor changes and small bugfixes
+ new languages: french, swedish and portugese
Version 2.0.0 to 2.0.5
+ fix the remove from your yourself bug
+ complete rewritten the code for rename role
+ rewritten code for delete a role
+ get_all_user_ids() fixed
+ new subdirectory-scheme for images, languages and styles
Version 1.4.5 to 2.0.0
+ insert pathinformation for different wordpress-versions
+ changed path from rolemanager to role-manager
+ insert fieldset for capabilities on User-Tab
+ create new .pot-FIle for translations
+ german .po and .mo files included

Something misspelled?

You can help me to improve my english - feel free to give me your feedback in this case.

696 Kommentare zu “Role Manager”

  • #1

    […] More information and the link to the download you can find on the new home of the “Role Manager Plugin” for Wordpress. […]

  • #2

    Really nice to see this plugin develop further. I do have a bug to report (I think…).

    Users with new roles created by the plugin doesn’t show in the “Author” drop-down-menu when editing posts or pages.

    In my particular site I have a few users that are only allowed to save drafts. When I publish their drafts my admin-user show up as the author, since the actual users name isn’t in the “Author” menu.

    If I assign one of the standard roles and then change the capabilities for that user, It’ll show. But that kind of takes the advantage away of having the ability to create new roles.

    I’d really appreciate if you could look into it, ’cause I can’t figure the problem out (even though I looked through the DB and the plugin code).

    Thanks for a great plugin, although.

  • #3

    […] Role Manager 2.0 is based on the plugin by Owen Winkler. This Plugin allows you to define and manage multiple subscriber profiles - called Roles and their Capabilities. Also you can create new Roles and Capabilities. […]

  • #4

    When you try to delete a group, in WP 2.0.x function get_all_user_ids() tries to find the field user_ID instead i have only ID. I modified function in such a way to have role manager function properly:

    function get_all_user_ids() {
    if ($ids = wp_cache_get(’all_user_ids’, ‘users’)) {
    return $ids;
    } else {
    global $wpdb;
    $ids = $wpdb->get_results(’SELECT ID from ‘ . $wpdb->users); ……………..

  • #5
    Gravatar Jay meinte

    Thomas, in regards to my bug that you mentioned, I wanted to share some more information.

    If I click on Users –> “Your Profile” tab, I can update my personal information on my profile without any errors. This is because the Role Manager options are not visible on the profile page.

    But if one goes to Users, and then from the initial screen, clicks on the “Edit” link for the administrator, you can’t update your information without getting the error I reported earlier. On this screen, Role Manager is printing out the full list of capabilities that I (the administrator) have access to…

    I don’t know if this is helpful, but it’s some more information to think about as you try to fix the problem.

    Thanks.

  • #6

    @Karl
    After I got your comment - I checked this and see the same. I will look for …

    @Fabio
    Thank you - I will check this in the next days.

    @Jay:
    Yes - it is helpfull. On my testmachine I fixed your first reported bug but I want make some more test.

  • #7

    I made some changes in the last days and will give you a small update of the “Role Manager”-Plugin at the end of this week. The upcomming Update fixes also the Bug reported by Jay.

    @Karl:
    Also WordPress 2.1 has not complete changed to Roles and Capabilities. In some cases it use the old user-level-based-system, eg. in the post-editor (edit-form-advanced.php. Also in admin_db.php function get_editable_authors and get_editable_user_ids). At the beginning of the next week I will give you a solution what will help you without change wordpress-code. :) My idea is:
    Create a extra plugin with a hook, what looks for a (new) capability called show_in_authorlist. Every bloguser with this capability will shown in the authorlist at post-edit-form.

    Please give me some time - because I’m a little bit busy this week ;)

  • #8
    Gravatar jon meinte

    Thomas, thanks for making this available. I’m having a problem after installing the plugin.

    I can no longer see the plugin management page — the one that lets you activate and de-activate plugins. I can see the page that lets me edit individual plugins.

    This applies to the admin role and a new role I created with the same permissions as the admin.

    If I try to type in the address of that page (plugins.php), I get an error that I don’t have sufficient permissions for the page — again, this is with an admin account.

    Thanks for any help or advice.

    Jon

  • #9

    @Jon:
    Sorry for my late response - I’m a little bit busy this week …
    Never seen this - hmmmm??? Is it on WordPress 2.1? If you deactivate the Role Manager you can see your Plugin-(De-)Act-Page again? (The hardest way to deactivate is removing the completet role-manager-directory)

  • #10

    Last night I have opened a new project for the Role Manager on sourceforge to get a public subversion repository. The project is now in the “Processing Queue for Projects Registrations”.

    In the mean time I made some more fixes - also the note from Fabio. I found some more bugs, eg. “Rename Role” doesn’t work properly. The new version comes out after the “Project Registration” next week. I hope this is not to late for you.

  • #11

    […] Detailed information and the download link you can find on the Role Manager Homepage. […]

  • #12

    It would be great, if it would support also groups with
    1. negative role: e.g. you want to put someone into an Administrator group MINUS ability to delete, view, change … other users. But it would be otherwise true admin, so all future things you would allow to admin will be allowed to this user

    2. user inviting into the same group - everyone could invite anyone to register, and if he is registered, he would got all the roles of that one who register him. Also if this user was allready registerd, he would recieve the roles of the “invitor” and xor the negative roles. Plus there would be a memo, who invited each guy. Imagine - you are an author and want someone to write an article. But if he would just register, he would recieve plain “subscriber” role. Now, you would have to contact admin to promote that guy … and that’s why it is now easier & faster to give that guy your own username and password, but this is less secure.
    The best would be, if everyone could give also not full his rights.

    I do not know if this is all in the socpe of role plugin, or if it would have to be part of a different plugin.

  • #13

    […] The Plugin will resolve a problem, reported by Karl in the context of the Role Manager Plugin: … in my particular site I have a few users that are only allowed to save drafts. When I publish their drafts my admin-user show up as the author, since the actual users name isn’t in the “Author” menu … […]

  • #14

    @noname:
    1. You can do this on two ways:
    a)
    Give the user the admin-role. After this delete unwanted capabilities on the detailed user-setup-page.
    b)
    Create a new role with the same capabilities and level as the original admin-role - but don’t activate unwanted capabilities for this new role. When give all users you want this new role.
    I recommended only the second way, because I think it is not a good idea to use the userbased extra capabilities. Both ways can be a security leak, because many coreparts and plugins looks more for the level as the capabilities. You must make some tests for the best level before you use this in a production environment.

    2. Create a special role for this way - eg. invitor. This role should have the capability to manage users. Create a user and set the role to “invitor”-role for him. With the new user create other users, who can create but not publish posts. Invite this new users with a special email from outside of wordpress. If one of the invited users have wrote his first post make a check on this. If all is ok, when publish this post and give the user more rights.
    Of course - this is not really what you want. In my mind you want a mix between a blog, a wiki and a forum. This is not what most blog-administrators want: on a blog you should know a little bit about your authors. But the time will tell us, what a good way is :)

    Last point from me: Please don’t use a name such as “noname” or “anonymous” and so on. I would rather talk with people than “nobody”. Thanks :)

  • #15

    thank you for your hints (even they are not much usefull ;) i know this ways but for my application i would need that what i describe, but nevermind)
    Just for the last part - Noname is my nick, i’m known for in czech republic ;) But i am not anonymous as i give my mail address and my personal website address ;)

  • #16
    Gravatar Fw meinte

    hi danke für das plugin! bin sehr begeistert :)

    allerdings wär es gut wenn man das dashboard für normale leser verstecken könnte, kann man das in das plugin mit einbauen?

    und zwar hab ich das hier gefunden:

    klick mich

    wär echt super

    mfg

  • #17

    […] Een essentiele plugin hiervoor is Role Manager (versie van Thomas Schneider werkt met WP 2.1, orgineel van Red Alt niet). Met deze plugin is het eenvoudig om opties toe te kennen aan gebruikers. Wordt WordPress niet als een Blog-tool gebruikt? Dan zet je alle postmogelijkheden met deze plugin uit. Mogen de gebruikers geen gebruik maken van de plugins, options, themes, etc.? Dit alles is te beheren met deze geweldige plugin. […]

  • #18

    Thanks so much for taking over this plugin!
    Please notify http://weblogtoolscollection.com/ so they can get the word out.

  • #19

    […] I had scratched my head and tried a whole range of plugins for wordpress-mu to try and achieve this however nothing quite did what I needed. The closest was the Role Manager plugin however it didn’t work with wordpress-mu… and after I had spent a quantity of time trying to get it working I realised that roles were assigned to users on a per-blog basis rather than globally. It’s a shame as a roles and capabilities based solution had sounded reasonably elegant. […]

  • #20

    […] Role Manager, el plugin de WordPress que permite asignar o quitar permisos a los usuarios registrados en el blog, tiene nueva versión, la 2.0.5, compatible con WordPress 2.x. […]

  • #21

    […] Update 06. März 2007 Ich habe die hier angebotenen Dateien gelöscht. Bitte nur noch das komplette Plugin benutzen! […]

  • #22

    @noname:
    Can you explaine me why my way 1b isn’t useful? In my mind this is what you mean with negative roles.

  • #23

    @Fw:

    Der Role Manager stellt keine direkten Verwaltungsfunktionen zur Verfügug. Mit ihm lassen sich Berechtigungen managen. Wie aber bestimmte Teile von WordPress - und dazu gehören auch Plugins - mit diesen Berechtigungen umgehen, ist nicht Sache des Role Managers.

    Daraus ergibt sich, daß der Plugin-Autor sein Plugin so ändern muß, daß es bestimmte Berechtigungen abfragt/überprüft und darauf hin seine Entscheidungen trifft. Dazu kann man auch neue Berechtigungen (Capabilities) benutzen. Ein Beispiel dafür ist mein Plugin “IWG Extended Author List“, daß genau die beschriebenen Methoden benutzt. Vielleicht kann es ja der Plugin-Autor als Anregung für seine Erweitwerungen nutzen, wenn Du ihn fragst.

  • #24

    @Don:
    Did you read comment #3 here ;) ?

  • #25

    […] Role Manager este plugin de wordpress tiene nueva versión 2.0.5, compatible con Wordpress 2.x. Este plugin nos permite establecer permisos de manera individual a cada usuario de wordpress. Perfecto para los blogs que tienen varios editores (Vía La brujula verde ). […]

  • #26

    Wow thanks a lot for pickin up the dev track on this essential plugin Thomas. Very nice of you…

    I have a small problem I just cannot solve. I have a lot of contributors submitting drafts but even though I have the ‘Read’ ability set for all of them they cannot view the drafts of other contributors. is this by design? if so what could I look at in role-manager.php to solve this problem? I took a look but I cannot see how this is determined anywhere.

    Thanks!

  • #27

    […] Wordpress v2.02 Wordpress v2.1 Wordpress v2.12 Role Manager v2.0.5 […]

  • #28

    […] Role Manager v2.0.5 Multiple Authors […]

  • #29

    @Miles:
    I will look for a way to do this.

  • #30

    Hi,
    How can I prevent the management of widgets under presentation?

  • #31

    @Miles:
    WordPress can handle this only by the “Edit Others Posts”-Capability. But I think, this is not what you want?

    @Don:
    This is handled by the Widget-Plugin. Please ask the authors of the widget-plugin which capabilities they used in such cases.

  • #32

    The Custom Capabilities usage is:
    1. create a capability name
    2. on the code of your plugin put something like ” if ( ! current_user_can(’MY_CAPABILITY’) ) ”

    Is that it?

    How difficult it would be disallow some users to choose from the category list when writing a post (allow them to post only on the default category)? Is it possible without hacking the core?

    What about associating categories to user levels, so some categories will appear as an option only for some users…? is it possible to do with a plugin?

    Leo,,

  • #33

    @Leo:
    Yes - this is the rigth way for using capabilities.

    The plugin is only a manager for roles and capabilities. You can create, delete and manage roles and capabilities. But you can’t nothing more.

    If you want handle a special situation - like yours - you need a other plugin, what handles this. A kind of such plugin is IWG Extended Author List. The best way to create such a plugin is to looking for hooks in the WordPress-Core. Don’t change the core-source.

  • #34
    Gravatar blaze meinte

    thanks for picking up development of this plugin

    just wanted to point you to wordpress’s new plugin repositry: http://wordpress.org/extend/plugins/

  • #35

    @Blaze:
    Done ;)

  • #36

    Hello. Thanks a lot for the plugin. Its really amazing for my needs. One question though. Would it be possible to disallow post authors to moderate their own posts? AS far as I can see the fact that a user creates a post unfortunately also gives him the right to also moderate the comments made on that post. I could modify wp’s main code but i’d rather not do that. Thanks for any suggestions.

  • #37
    Gravatar Martin meinte

    Hello Thomas:
    Thank you for a very impressive plug-in..
    I’m a newbie to Wordpress and know very little about PHP, so.

    I have been wanting a contributor or author to be able to edit or delete comments they make to someone else’s posts, as well as “their own” comments to “their own” posts. The original Wordpress, without a plugin, required you set the user to at least Editor before they could edit/delete their “comments” to someone else’s posts. But then they could delete everyone’s posts and comments, as well as anything else someone had posted (photos, files, etc.).

    I found the following info under Contributor (Edit-Posts) at url: http://codex.wordpress.org/Roles_and_Capabilities#edit_posts

    Thought I understood but guess I didn’t.
    ———————————————————
    Manage->Comments — meaning: “show post”-link; “edit post”-, “edit comment”- and “delete comment”-links only on own posts since edit-comment.php (http://trac.wordpress.org/file/trunk/wp-admin/edit-comments.php) looks for “current_user_can(’edit_post’, $comment->comment_post_ID)”‘
    —————————————————

    I need either a contributor, or author, to be able to edit/delete their own input (photos/posts/comments as well as posts, but no one else’s. An editor and above would be able to edit or delete anyone’s posts, files, photos, and comments as it is now.

    p.s. I tried setting a new capability for Contributor in your plugin for “Edit Comments”, but nothing changed. Is their coding that needs to be added when you add a new capability? Also now I can’t delete that capability, and afraid to use the “Delete unused capabilities”..
    Hope I haven’t confused you with my ramblings.. To keep this board clear you can also contact me at me email addy.
    Thanks
    Martin

  • #38
    Gravatar Blaze meinte

    @Thomas, where, i can’t find it? :(

  • #39

    Great plugin - It would be good if you could add the ability to select “Manage Roles” as a capability - I want a role to be able to edit user settings, but not roles.

  • #40

    I suppose if I just deactivate the plugin when I don’t want it used, that’d be okay..

  • #41

    Sorry for my late response - I’m a little bit busy in the moment.

    @Blaze:
    Sorry - this was my mistake. I only want add it - without subversion. I want to use subversion and other services at sourceforge. In the next day I will to think about svn at wordpress. Sorry, again.

    @Tudor:
    Wordpress-Core knows the capability “moderate comments”. But - I think you want a other solution. Only disallow moderate comments on own posts but allow moderation on others posts comments - is this what you want? Then you need a new plugin for this. It’s not a good idea to modify the core. If you only want allow moderate comments on own posts - use “edit posts”-capability.

    @Martin:
    Wordpress 2.1 knows many new capabilities with the term “others” - e.g. “edit others posts” and “edit others pages”. Create a new Role - e.g. “My Author” and use the capability “edit posts” for this. This will allow what you want - only on own posts. But remember - this is new in 2.1. If I misunderstood you - please give me a short note here.
    And: Yes - the WordPress-Core knows only some basic capabilities. If you create a new one you need coding for this capability. Look in my code for Karl - the “IWG Extended Author List”-Plugin (in the left menu above). I know also your “afraid” :) This is from the original-plugin-code. It’s on my roadmap to change this and make it easier to remove a single unused capability.

    @James:
    Deactivation is the only solution at this time. This is also on my roadmap. In the moment I make some tests with a new capability, called: “Manage Roles and Caps” to realize this, because I think this is important for many people. Not every user who can manage users should also have the rights to manage roles and capabilities. Hope this is a good news for you.

  • #42

    Hello again.

    I probably didn’t explain it properly. I’m making a site where I want users to be able to post entries but not be able to moderate comments either to their posts or to anyone else’s. That should be the admin’s job, users should only have posting privileges. So, is there any way I could incorporate this in the plugin?

    Thanks again.

  • #43

    Ah - I understand. This should be easy: remove the capability “edit comments” from your authors and set under options->discussion the point to: “Every comment must be moderate by an administrator”. I can’t check this solution in the moment - but it should be working. Can you try this?

  • #44

    Thanks for the quick reply. I hadn’t thought of that. Unfortunately it doesn’t work. So apparently WP considers that Authors are Admins for their own posts.

  • #45

    Urgggh :(
    I will look in the code for a hook what can help us in this situation. Give me some days for this, please.

  • #46

    Hi!
    This plugin sure is a great one, I`ve tried it in a regular WP installation and it worked alright.
    But when I try to run is on a WPMU install, it doesn`t work. It`s layout is a little messy, and I keep getting errors like “Fatal error: Call to a member function on a non-object in /home/rsenise1/public_html/jornalismo/wp-content/plugins/role-manager/role-manager.php on line 143″.
    Do you have any ideia on how to fix it?
    Thankz, Senise!

  • #47

    Senise, Role Manager isn’t designed for MU. Maybe, you can find a solution at Sam’s Work Blog. Please read comment #20 above.

  • #48

    Thanks Thomas for this great plugin. I have made a French .po file for it. If you would like to add it to the plugin’s package, I will be happy to send it to you. Please contact me by email.

  • #49

    Yes, I would like to add it. I will contact you by email in the next days. Thank you, very much!

  • #50
    Gravatar Martin meinte

    Thanks for the response Thomas:
    I probably didn’t make myself clear. A “contributor” can edit his own posts right now, but cannot “edit/delete” his own comments. There curently is no role for ‘edit comments’. In order to allow someone to edit/delete their own comments, they must be given the ‘edit other’s posts’ role, but then they can delete everyone else’s posts as well as other’s comments. So creating a role “my author” and giving a role “edit posts” would be what a contributor already has. He can delete own posts but not comments.
    I think I will use your suggestion to another query to find a place and add some code when processing the comment for:

    In regards part 2 of your response. I successfully purged the unused capability I had created by making sure it wasn’t used in any role.
    Thanks.. You have a great plugin..

  • #51

    How do I give someone the ability to add/modify users but not the admin? I also d not want them to access the Role Manager? Right now I have them setup as an editor with the ability to edit users but we need to keep them from deleting the admin role and capabilities.

  • #52

    Hallo Thomas,

    danke erstmal für dein Plugin.

    Allerdings habe ich folgendes Problem:

    1. Ich würde gerne eine Benutzergruppe haben, die im Admin-Panel überhaupt keinen Zugriff auf das Menü “Kommentare” hat, bzw. es würde auch reichen, wenn alle Benutzergruppen mit dem Level kleiner 8 dieses Menü nicht sehen können. Ist sowas mit deinem Plugin möglich, bzw. kannst du es erweitern, dass dies möglich ist?

    Zudem noch eine Frage: Was bedeutet “Edit Private Posts” bzw. diese anderen private Optionen?

    Danke im Voraus, smoochy

  • #53

    Hi. First the plugin works great. However, one problem I’m hoping you can help me with.

    I primarily use the plugin to allow my registered users to view private posts using a special field post_level. Registered users have no problem viewing private posts but cannot comment. How do I modify it so they can leave a comment on private posts? Btw, I leave the “allow comments” section checked on the post page.

  • #54

    @Murph’s Mom:
    I will add this in the next release. Please also read comments #40-#42 above for a solution in the moment.

    @smoochy:
    Die Erklärungen für die “private”-Dinge findest Du im WordPress-Codex. Userlevel gibt es zwar noch - aber langfristig sollen sie durch Gruppen (Roles) und Berechtigungen (Capabilities) ersetzt werden. Mit diesem Plugin kannst Du beides verwalten - aber grundsätzlich keine neuen Funktionalitäten schaffen oder vorhandene ändern. Dafür benötigst Du separate Plugins - wie zum Beispiel “IWG Extended Author List”.

    @mobi:
    Can you explain me this a little bit more, please? Do you use WordPress-Post-state “private” or do you flagg a post as private with a costum field and state “published”?

  • #55

    I use your plugin to set the user level for registered users to 2. I then set a custom field on some posts, “post_level” with the value set to 2. I then save the post as “private” with the “allow comments” checked.

    Registered users at level 2 can log-in and see the private post but they can’t comment. When they try to comment it brings up a list of empty uncatergorized posts.

  • #56

    great plugin!

    But.. i have the same problem of TUDOR. The CONTRIBUTOR can edit comments. Its very important to fix this problem because its the low level and we need to open the website to other contributors without let them make damage. I wait for your fixes.

  • #57

    @Moby:
    I will try something in the next days with your situation.

    @Stefano:
    This is not a Role-Manager-Problem. It comes from the WordPress-core - but I’m working on a solution. I hope I will finish at the weekend with an extra Plugin what will help you and Tudor.

  • #58

    Thanks for the plugin. I’m gonna try it out in a few.

  • #59

    Hey, thanks. If you come up w/a fix, I’d be most appreciative.

  • #60

    Fatal error: Cannot redeclare class rolemanager in …/public_html/blog/wp-content/plugins/role-manager/role-manager.php on line 22
    None of the functions work for role manger 2.5. or previous version. I have wordpress 2.1.2 .
    All buttons give the same error as above.

  • #61

    […] Role Manager 2.0 is based on the plugin by Owen Winkler. This Plugin allows you to define and manage multiple subscriber profiles - called Roles and their Capabilities. Also you can create new Roles and Capabilities. […]

  • #62

    @shahram:
    I tried it yesterday on a fresh WordPress 2.1.2 installation without any problem or failure. Please check your installation: if you have other parts of the plugin under a different location as plugins/role-manager/-directory please remove those.

  • #63

    @Tudor and Stefano:
    I’m not amused about the way WordPress handle your problem. I made many, many tests - and I can give you only a partially solution.

    First the way, how WordPress handles comment moderation for the posts author:
    All parts from the comment moderation inside the core are going to verify the authors capability “edit posts”. If a post is published - when this check will on demand changed to test the capability “edit published posts”. This happens in the function map_meta_cap inside the file wp-include/capabilities.php.

    What does this means?
    If you remove the capability “edit published posts” from a user - the user can edit his draft. If the user publish the draft - he can’t no longer edit this post to make modifications on it. But: He also can’t moderate comments on it! Not own comments either.

    But we have an other problem:
    If the author is going to read his published post and when he detect a typing error (misspelling, grammar etc.) he can’t edit this post to correct his mistake, bacause he doesn’t have the capability “edit published posts”. Urghhh :(

    I wrote a Plugin to handle this situation a little bit better - but only a little bit: If an author have the capability “edit published posts” and not the capability “moderate comments” he can edit his own post until the first comment on this post is occurred. This means: The first comment on a post will on demand remove the capability “edit published posts” from the author for this single post. In fact: The author can’t any longer edit this post and is not allowed to moderate any comments on this single post.

    If you or any other person is interesting to try this new Plugin from me, please give me a short note here.

    If this is not what you want, you must change the core of WordPress. I don’t will do this for you.
    The best way, I think, is to make a change request on Trac to implement a new way and a new capability - e.g. “edit comments on own posts” - to handle this. But this is not my part ;)

  • #64

    Thanks for the update again, I was wondering about that edit my user error:) As a note, this seems to be ok with 2.1.3 for me today.

  • #65

    As a side note: I’d advised putting a big fat colorful box link on this page http://www.im-web-gefunden.de/2007/01/28/wordpress-21-role-manager-plugin/ so that users from the old forums post get here. The page is edited heavily, and seemed a bit confusing to some intro users I talked with.

  • #66

    Thank you so much for updating the Role Manager plugin! I had to stop using the old one because it interfered with a visual editor plugin. I missed having all those options. Danke sehr!

  • #67
    Gravatar Merlin meinte

    I have an error using this plugin.

    JS says to me: sack() is not defined

    This error is in function submitme(frm) in role-manager.php.

    Can someone help me??

  • #68

    […] Role Manager by Thomas (originally by RedAlt) This plugin lets you define custom roles - and lets you assign them to users, levels, and even has a plugin interface for custom admin screens. A godsend application when dealing with multiple authors; I couldn’t work without this! […]

  • #69

    @Brady:
    Thank for your feedback again. I will put a big box at the top of the old entry in the enxt days.

    @Merlin:
    Yes - it’s right. This is a small minor bug from the original. I will release next week a minor update, what will fix some small bugs - also the one you reported - and suport two new languages.

    Thomas

  • #70

    Hello again. Any luck w/the problem I mentioned previously?

  • #71

    […] Of course, there is a fantastic plugin out there that allows a blog owner to modify existing roles and capabilities or even add other roles and capabilities. If the five solutions out of the box don’t quite work for you, you can change it up. […]

  • #72

    Thomas ;)

    vielen, vielen Dank - SUPER plugin :)

    It just solved all my headaches - installed it and used it without any glitches - excellent !!!

    THANKS ;)

  • #73

    @Moby:
    I don’t forgot you. I tried many things but can’t find a good solution :(
    But: I would therefore recommend that you try the Plugin “Disclose Secret” to solve your problem. Do you know this Plugin?

  • #74

    […] Role Manager 2.0 is based on the plugin by Owen Winkler. This Plugin allows you to define and manage multiple subscriber profiles - called Roles and their Capabilities. Also you can create new Roles and Capabilities. […]

  • #75

    […] Nachtrag: Habe gerade noch das von Thomas an WP 2.1 angepasste Role Manager Plugin installiert & damit eine eigene Benutzergruppe für Artikel-Autoren frei definiert - ein wirklich sehr geniales Plugin. Dazu habe ich das Wordpress Backend dahingehend bereinigt, daß jetzt alle für registrierte Autoren überflüssigen Felder ausgeblendet sind & alle Kategorien auf einen Blick erscheinen. Ist per CSS in der Datei /admin/wp-admin.css ein Kinderspiel - via Robert Hartl. […]

  • #76

    Hi Thomas,

    Thank you for all of your hard work. I hope that you can help me with my problem. I have been trying for a while, to get 2.0.5 to work. I don’t an error, but I have a new role created, set to default, giving new members the ability to post. Each time it says that user doesn’t have permission.

    Thanks for any help you can give!

    Webigail

  • #77

    @Brady:
    Put a colored box at the top of the page for the newcomers ;)

    @Webgail:
    I saw you using Wordpress 2.1.3. Where were your problems to get it to work? I tried it on a fresh 2.1.3 without any problems.
    It’s not really a good idea to give all new members the ability to publish posts - but this is my point of view ;)
    Okay: Which capabilities are assigned to your new role? Please let me know all of these and also the user level the new role has.

  • #78
    Gravatar Zekka meinte

    Hi Thomas,

    Great plugin, works like a charm. Just two questions:

    -I have translated the .po to pt_PT (Portuguese), care to have it?
    -Is there a way to make another plugin “Role Manager aware”? i.e. I use StickPost and would like to be able to control its usage per profile.

    Thanks and gruesse aus Portugal…

    Z

  • #79

    @Zekka:
    Yes - I want your translations ;)

    I’m very happy about every new or updatet translation. In the last days I’m finished the setup for developer and translator at sourceforge. You - and every other translator - can submit your translation, if you use this tool. You can be first one - if you fast enough ;)
    If you don’t want this - give me a short note, please.

    It is very easy to enhance other plugins to use Roles and Capabilities. The release 2.0.6 is ready since yesterday - but before it will released - I will set up some more information pages, eg. for developer, translator and developer of other plugins to use capabilities. This is the reason, why I want give you only a short tip here: All parts you should know can be found in wp-include/capabilities.php.
    Simple use the function current_user_can('the_needed_cap').

    Hope, my short answer is a help for the next days ;)

  • #80
    Gravatar Zekka meinte

    Thomas,

    Translation is uploaded.

    As to the enhancement to the other plugin, since I’m short on time, I’ll wait until you post the more detailed developer info…

    Cheers

    Z

  • #81

    No, but I will certainly check it out. Thanks for recommending it!

  • #82
    Gravatar Tom Hughes meinte

    Hi Thomas, thank you for this great plugin. I have a question I hope you can help me with. I have a login on the front page of a site I have developed. After logging in the user is returned to the same page, but now if they have a user level > 1 they should see a “site admin” link. This works correctly for the administrator role, but not for the new custom roles I have assigned with a level of 2. Here is the code I am using:

    <div id="login">
    <?php global $user_login, $user_identity, $user_level; get_currentuserinfo();
    if ($user_login) { ?>
    <h2>Logged In</h2>
    <p> Welcome, <?php echo $user_identity; ?><br />
    <?php if ($user_level > 1 ) { ?>
    <a href="<?php bloginfo('url'); ?>/wp-admin/">Site Admin</a><br /><?php } ?>
    <?php wp_loginout(); ?></p>
    <?php } else { ?>
    <h2>Login</h2>
    ... login form here ...
    </div>

    Any help you can provide will be greatly appreciated.

  • #83

    I think it is easier if you use an capability-check - you need only one function and not so much global vars for this. Try the same with an capability what all your registered users have with current_user_can('the_needed_cap').

  • #84

    Hi, thanks for a great plugin!

    I have the same question as “Murphs Mom”. I would like to give users the capability to edit/delete/create users EXCEPT for the admin role. Will that make it into the next version?

    Thx - Susan

  • #85

    […] Role-Manager, damit kann ich bisschen Gott spielen und die Regeln neu verteilen ;) […]

  • #86

    @Susan:
    I think this is a little mistake. The general way to create/edit/delete users comes from the core. In the next upcomming release-series (2.2.x - this is other as current 2.0.x-series) of Role Manager you need an extra capability to use the Role Manager. If a user has this capabilty he can using the Role Manager. If the user don’t has it but has the capability “edit_users” he can create/edit/delete users as implemented in the core.

    For your problem - you need an extra Plugin what help to restrict ‘edit_users’ to avoid non-admin-users to manage users with adminrole. (Hope this is the right spelling/grammar for this :) ) In April should WordPress 2.2. comes out to the public. I don’t know if the upcoming 2.2.-WordPress-Core changes the way to handle your problem better as the current 2.1-series. If not - we should coding a Plugin for this :)

  • #87
    Gravatar amar meinte

    thanks for this amazing plugin
    Q: what if i want to remove plugin, and i want every thing about users back to what it was?

    thanks

  • #88

    @Amar:
    The Plugin doesn’t have a function like “reset to factory defaults” and such a function isn’t on the roadmap, yet.

  • #89
    Gravatar amar meinte

    thanks Thomas
    ok how i do that manually ?
    I have some knowledge in PHP & MySQL

    thanks again

  • #90

    @Amar:
    WordPress holds the information on two places: The first is in the options-table (mostly wp_options) - it is a row called wp_user_roles. The datafield stores all roles and their accociated capabilities and user levels. The second part is stored in usermeta-table (mostly wp_usermeta). Every user has a row called wp_capabilities. If a user don’t has extra capabilities - this means: only all capabilities from his role - only the role is stored. If a user has more than one role or has extra capabilities this is information are also stored here.
    Both parts are stored as serialized information - setup it manually is a little bit tricky ;)
    Why don’t you want using the Role Manager for this job? Do you don’t know the “factory settings” for roles and capabilities on a fresh WordPress-Installation? Which part is lost or damaged on your installation?

  • #91
    Gravatar amar meinte

    oky i decide to do not do that manually :)

    yes I forget or I don’t know the “factory settings” for roles and capabilities of wp users. if you can tell me this -especially for author user type- you will do a favor for me - I can not reinstall wp on my PC or server.

    thanks again, I hope that is the last thanks :)

  • #92

    5 gute Wordpress Plugins auf unserem Weinblog

    Bevor es weiter zum nächsten Wein geht noch kurz mein besonderes Dankeschön an die nächsten 5 eingesetzten Wordpress Plugins:
    Math Comment Spam Protection Plugin
    Wieder ein super Plugin von SW-Guide. Das Plugin nutzt bei den Kommentaren …

  • #93

    @Amar:
    Sorry for my late response - I was absent from Berlin in the last days.

    You can find this information in the Wordpress Codex about Roles and Capabilities.

  • #94
    Gravatar MTO meinte

    Hello,
    Thanks for this great plugin! Really, thanks, it’s great!

    By the way, I’m having an issue. I want to create a role for someone to edit/delete comments. After many tests, I discovered it’s only possible enabling “Edit Published Posts” & “Edit Others Posts”. The problem is, that by doing this they can also edit the author’s published posts, and I don’t want that. Not enabling both will not show the edit links.
    Any idea? This a wordpress bug?
    Thanks.

  • #95
    Gravatar amar meinte

    thanks Thomas ..

  • #96

    @MTO:
    You want a Role what only can moderate comments? WordPress knows a capability “Moderate Comments” - but I had never play with it. What is happens if you use it?

  • #97
    Gravatar MTO meinte

    Yes, that’s what I want.
    It seems that “Moderate Comments” is for approving posts when all posts are moderated instead of immediately published, so that doesn’t do the job I need. Thanks!

  • #98

    @MTO:
    I played a little bit with “moderate comments”. Now I know your problem - needed capabilies are: “edit posts”, “edit published posts” and “moderate comments”. I don’t have any solution to fix your problem - all involved parts are from the core. You need an extra coded plugin for this, sorry.

  • #99
    Gravatar Nik meinte

    …ich habe nur eine Frage bezüglich des “Aussehens” des Rolemanagers in Wordpress.

    Bei mir erscheinen plötzlich alle Felder/Buttons untereinander - mir war so als wären die beim ersten Mal schön übersichtlich sortiert auf der Seite gewesen….gibt es dafür eine Erklärung?

    Danke

    *edit: ….Ich habe gerade bemerkt, dass das “Custom Admin Menu” PlugIn von Barun Sing die CSS durcheinander bringt…. wo könnte man da die relevante Formatierung finden - da wird wahrscheinlich irgendeine Klasse oder so gleich benannt sein…

  • Sind sie auch ;) nd was kommt jetzt für eine Frage?! Natürlich die nach Browser, Version und Betriebssystem - sonst kann man doch so schlecht helfen ;) Um es einfacher zu machen: Wie sieht es denn in einem anderen Browser als Safari 1.2 aus? ;)
    Damit noch was zu beantworten bleibt - sag’ mal bitte auch gleich Deine WordPress-Version mit durch.

  • Gravatar Nik meinte

    Hallo Thomas,

    - Wordpress Version 2.1.2 DE
    - Safari 2.0.4 auf Mac
    - Firefox 2.0.0.3 auf Mac

    könnte ich einen Screeshot schicken?

  • Und bei beiden Browsern hast Du das Problem? Ja - schick mal ‘n Screenshot. Ich komme aber erst morgen dazu, mir das auf dem Mac anzusehen. Aber eigentlich sieht es da genau so aus, wie auch unter Linux und Windows. Warte also mal auf Deine Screenshots. Adresse findest Du im Impressum.

  • Gravatar Nik meinte

    Danke - ist dann unterwegs.

  • Hello,

    I tried to activate role manager 2.0.7 in a wordpress version 2.0.4 and I am getting the following error upon activation.

    Fatal error: Call to undefined function: wp_enqueue_script() in /wp-content/plugins/role-manager/role-manager.php on line 51

    Any help would be appreciated.

  • @Jared:
    It’s not a good news at the beginning of a new week :(

    The wp_enqueue_script() is for calling the ajax-lib. It seems what WordPress 2.0.4 doesn’t knows the function. I should more testing with “very old” versions of WordPress ;)

    At late night today I will release a version, what fix this issue for WordPress-Versions without wp_enqueue_script(). I’ll give you a note by email if the release is available here.

  • Thomas

    Your plugin is beautiful.

    I am trying to set up a test blog site and a user (’Author’), that will allow me to send username and password to many people so that they can create test posts to my site (which I will also autodelete after x days with the use of another plugin).

    However, I find that no matter what I do, I cannot hide the “Profile” tab or eliminate the line on the Dashboard that reads “Update your profile or change your password”.

    Do you have a solution with or without your plugin.

    Regards,

    Robert

  • Thomas

    Beautiful Plugin

    However, I don’t seem to be able to restrict the ability of a user to change their own password. Is this possible with your plugin?

    Basically, I’m setting up a testing blog site for one of my projects and I want to create an Author that can create blog posts. But I want to be able to send to many people that Author’s username and password, so that they can use it as a testing entry value.

    But as a result I don’t want them to be able to change the password, Really I’d like to restrict them from seeing the ‘Profile’ tab altogether and even not see the ‘Update Your Profile or Change Your Password’ link on the Dashboard page.

    Better still see no ‘dashboard’ tab at all and go right into the ‘Write’ tab.

    Any ideas to help would be appreciated.

    Regards,

    Robert

  • @Robert:
    I saw a Plugin “Hide dashboard” - but can’t find the link in the moment :(

    To restrict the user from seeing the “Profile”-tab and to redirect them to the “Write”-Post additional coding is needed. I don’t know such a Plugin what do this job in the moment.

  • @Robert:
    I made some searches and found this: Both plugins can be a base for an extra coded stuff what can help you:
    Hide Dasboard Plugin” and “Weasel’s Login Redirect / Text Replacement Plugin“.

    I hope this is a little help for you.

  • Thomas

    Nice to hear from you. Having a look at what you sent. Many thanks.

    Regards,

    Robert

  • Thomas

    Love your Role Manager plugin.

    Just one more question, is there any way I can restrict users from making changes to their own profile.

    I’m making a common user for several visitors to my wp 2.1.3 blog site. I don’t mind them seeing what’s in the profile tab for that user but do not want them to have the ability to make changes to the profile, thus making it impossible for others to login with old profile (mainly a changed password would have done that).

    Regards,

    Robert

  • @Robert:
    I think you need a way to realise a function like “expire profiles” or “expire users”. I don’t know a plugin what realise such a function - but I believe it is easy to implement for someone who will coding this. I’m to busy for such a job in the moment, sorry.

  • Gravatar KellyPutty meinte

    Hello Thomas,
    I am receiving the same error as in #61:
    Fatal error: Cannot redeclare class rolemanager in /home/surepog6/public_html/wordpress-2.1.3/wordpress/
    wp-content/plugins/role-manager/role-manager.php on line 23

    I reinstalled WP 2.2 with Role Manager Plugin 2.0.8., followed your instructions, and did not make any modification.

    Do you know what I am doing wrong?
    Could it be something on the Web Server?

  • Whew, having more of those “authors can see edit-comments.php and see every commenter’s email and IP address” type troubles.

    I deactivated and deleted the old Owen Winkler role manager completely, then uploaded and activated yours.

    I created a new role called “Writer” and only gave it “read” permission. Assigned it to one test user, logged in under that, and can only see Dashboard and Profile. Excellent.

    Logged in as admin again and added “Edit Posts”. So ‘Writer’ only has ‘read’ and ‘edit posts’ capabilities, nothing more. I double-checked my specific test user only had these two capabilities.

    Logged in as the test user and nuts I can see Write, Manage, and Comments. Under comments I see everyone’s comments with email and IP addresses, not just the test user’s comments as per
    http://codex.wordpress.org/Roles_and_Capabilities#edit_posts

    I read through most of your comments and get the general idea this is a wordpress core code flaw introduced in 2.0 versions? I’ve seen many support questions on this and nobody has a solution yet.

    Any advice? I had to drop everyone to subscriber a few weeks ago, nobody’s writing posts at my site anymore, all my users are pssd at me, i’m not able to find any support or solutions, and i’m actually looking at other engines besides wordpress, it’s getting that serious.

  • Hello,

    So glad to finally find an update to this plugin.

    I am currently using version 1.4.5 on Wordpress 2.0.6 and would like to upgrade to your latest version before upgrading to Wordpress 2.2

    Is the upgrade as simple as deleting the old version and uploading the new version. I will back up my database first but I am wondering if my old settings will be kept after the upgrade?

    Thank You
    Morgs

  • Very cool, thanks. I haven’t used it yet on my WP 2.2, but I’m sure I will. Install went well.

  • Gravatar Albandi meinte

    Is there a possibility to set a role for “unregistered User”?

  • Hi, thanks for the great plugin, it works well with wp 2.2.

    I juat have a question; I want the editor to be able to add users but not to edit users, can this be possible?

    Thanks

  • Thank you very much.

  • I submitted my question in comment #115 to the wordpress trac: http://trac.wordpress.org/ticket/4353#preview

    It looks like a core code issue rather than a plugin shortcoming.

    As it is now, any access to the write page also gives access to the comments menu, where anyone can see the email/IP of all site commenters (a very bad thing).

    While we wait for that release, is there at least a way I can cut any comment access from Contributors and Authors?

  • Idaho Falls….I have a suggestion. I’m sure you don’t want to edit WP core code, but here’s a slightly less invasive option: comment out all instances of the word “Comments” so they don’t show up. This doesn’t change the behavior of WP, but hides it and leaves nothing for to click on. Similarly, you might comment out the table displayed on the Comments page where you can see the IP addresses. Here are my search results for Comments (capitalized only) in wp-admin: http://pastebin.com/930745 (good for one month from today). Back up first, your mileage may vary, and this suggestion is the idea of this user, not the site owner. Use at your own risk. :) :) :)

  • Joel Rothschild is working on improving Owen Winkler’s Limit Cats plugin. It doesn’t work properly in 2.1.3, but it is a great complementary plugin to this one. The revision starts with some modifications to the original, two options, found here: http://mahzeh.org/?p=24
    Then continues with a totally renewed version here: http://mahzeh.org/?p=25. There seems to be some trouble with the all-new version, but the modified version worked well for me. I hope the developer gets the new version working quickly, as it seems to address a lot of the concerns folks have expressed with comments being shown, such as Idaho Falls’ problem.

  • First of all - my other project is finished (you remember the big box on the top of this page?) and I’m back now.

    @KellyPutty:
    This is not a server problem - you should remove the all parts from old Role Manager installations first and then do the steps from the installation-instruction.

    @Morgan:
    Yes, of course. The old settings are will be kept after the upgrade. If not, please give me a note. Hint: The underlaying databases are the same.

    @Albandi:
    No - or I don’t know it ;) All parts for unregistered users (also users are not loged in) implemented in the core of WordPress. If you want know if a user is loged in (only registered users can do this) or not you can find a solution in my german post here (translation should be easy)

    @Israel:
    I don’t know a way to do this. If a user can add user this user can also edit users. See also Comments #13, 14 and 15. This is a core issue.

    @Idaho Falls:
    I read all your comments, your tac-ticket and I understand your problem and why you are angry at this. I will contact you by email, because I’m interested to find a solution for situation like yours - but remember, please: This is not a Role Manager problem.

    @Marci:
    Maybe I will also implement such a function into the Role Manager. But I’m not sure if all Role Manager User want a merge with limit cats in one Plugin. And: Limit Cats will only limit which categories will appear in the post editor - not for reading. You can’t set a category to private.

  • Great Plugin, I like it. I am looking for a role management tool for my wordpress site.

    Thank you so much.

  • Just FYI: I think I found a bug in Role Manager. Not one that really affects me, but since I saw it I thought I would mention. Also posted this comment on WP forums.

    I’m using Role Manager 2.0.8, which works great unless you want to take an existing post (haven’t tested beyond that), and reassign that post to a new “Post Author” in the edit post screen. It only seems to list people I put into traditional (ie comes with WP) roles.

    For the record, I am also using the following plugins besides Akismet(just in case it’s one of those):
    Access By Category
    Front Page Excluded Categories

  • @Lynne:
    Which WordPress version do you use? And: Can you post the link to your forums-post, please. I want monitoring the comments on the forum for this special issue. At the weekend I will check the WordPress-Code if you give me your WordPress-version. And please, can you leave also the links to your plugins (except Akismet) here?

  • I’m on WP 2.2.1.

    Forum post
    Access By Category
    Front Page Excluded Categories

  • Gravatar Stu McLaren meinte

    Thomas,

    You’ve done a great job with Role-Manager and I wanted to say thanks.

    I was also wondering if there is anyway to assign multiple roles to the same user?

    For example, with your plugin I am able to use Wordpress to manage a membership site by assigning my users different roles which then have access to different categories.

    However, each month I have to manually update each users role depending on whether they paid to access the content for that particular month.

    I would like to be able to add a new role to each user every month (in addition to the role they already have) therefore giving them access to different content on the site based on their role.

    Is there a way to make this possible within Role-Manager?

    Thanks again!

    Stu McLaren

  • Hallo,

    nachdem ich das Role Manager Plugin gefunden habe und es nun erfolgreich installiert und soweit begeistert eingesetzt habe, bin ich nun auf der Suche nach einer Funktion, bzw. einer Einschränkung, bei denen mit bisher weder im deutschen noch im englischen Forum jemand helfen konnte.

    Ich würde gerne Autoren die Berechtigung geben, Kategorien zu erstellen, aber sie sollen Kategorien nicht löschen oder editieren könen. Vor allem sollen sie nicht die Kategorien der anderen Autoren löschen können.
    Ist das realisierbar?

    Die Lösung die ich im Moment habe, nämlich im Admin Panel via css die Kommentarseite komplett auszublenden ist unzufriedenstellend…

    in der Hoffnung auf Hilfe
    vielen Dank
    Hannes

  • @Stu:
    Yes, the underlaying WordPress core supports more as one role for an user. The Role Manager doesn’t do this at the moment and such a feature isn’t on my roadmap yet, sorry.

    For situations like yours I think it is a better way to change the userdata with an extra script and using a cronjob directly in the database. It is easier to coding such a way and using a Plugin like the Role Manager only to check the right settings.

    If you don’t find any other help for your situation, maybe, I can help you - but only as a paid consultant, sorry. In this case you can contact me by email - using imwebgefunden at gmail.

  • @Hannes:
    Ich kenne nichts, was userbasierte Kategorien, wie Du sie haben möchtest, realisiert. Es gibt ein, zwei Lösungen, mit denen Du Usern erlauben kannst nur in bestimmten Kategorien zu posten - aber das ist ja nicht das was Du willst.
    Das mit dem Ausblenden per CSS ist keine so gute Idee, da die User ja trotzdem darauf zugreigfen können, wenn sie die URL kennen. Aber was hat die Kommentarseite wiederum mit Kategorien zu tun? Das habe ich noch nicht so ganz verstanden. Kannst Du das noch mal beschreiben, bitte?

  • Hi,

    danke für die Antwort.
    Natrülich hat die Kommentarseite damit nichts zu tun, sondern das ist nur ein Flüchtigkeitsfehler. Was mittels CSS ausgeblendet werden köntte um das editieren der Kategorien zu verhindern ist unter Verwalten im Adminbereich die Seite Verwalten/Kategorien.
    Alternativ könnte man in der categories.php auch die Auflistung der Kategorien an dieser Stelle löschen. Was auch keine so elegante Lösung ist…

    Mit anderen Worten, der Schreibschutz für Kategorien für alle außer den Admin ist bei Wordpress nicht realisierbar?

    GRuß
    Hannes

  • @Hannes:
    Nicht der Schreibschutz - sondern die Verwaltung der Kategorien. Und wer Kategorien verwalten darf, wird von WordPress intern über die Berechtigung/Capability “Manage Categories” geregelt. Und diese Berechtigung kannst Du über den Role Manager jedem zuweisen. Allerdings ist das für die Lösung Deines Problems zu wenig an Konfigurationsmöglichkeiten wenn ich Dich richtig verstanden habe, oder?

  • …ja, das ist leider zu wenig für die Lösung meines Problems. Die Rollenzuweisung müsste die Möglichkeit bieten zu differenzieren, so wie das bei den Beiträgen in ähnlicher Form ja auch der Fall ist. Da kann man differenzieren, dass z.b. jemand nur seine eigenen Beiträge editieren und löschen kann.

    Hannes

  • Stimmt - gerade die Kategorieverwaltung kennt leider wie die Userverwaltung nur das “managen”. Und da der Role Manager nur das Verwalten kann, was WordPress auch intern kennt, bleibt eigentlich nichts weiter übrig als über ein Trac-Ticket mal bei den WordPress-Entwicklern nachzufragen, ob sie die Kategorieverwaltung intern noch verfeinern wollen. Oder man schreibt sich ein eigenes Plugin, daß eventuell vorhandene Hooks in categories.php nutzt.

  • Hi, Great plugin! Just one question.

    I want a role group to be able to create new pages and posts, and edit the pages and posts they have made. I can’t seem to do this. Any Ideas?

    Many THanks!

  • @Adam:
    Since version 2.1 WordPress knows also some capabilities for pages, e.g. “Publish Pages” and “Edit others Pages” and so on. Did you try them?

  • Gravatar Blaze meinte

    noticed your using get_settings() which according to the following webpage is depreciated!
    http://codex.wordpress.org/Function_Reference/get_settings

    just thought i should point it out in case you missed it ;)

  • I think these blog is really useful for new comers and Excellent resource list.

  • Gravatar Kristoffer meinte

    Hi!

    Great plugin, but i cant get it to work properly, when i’m ready creating a new role, and click “New Role” i just get a blank page, and no new role is created…

    What can be wrong?

  • Gravatar David meinte

    Hi, I’m a total PHP newbie but I want to enable a custom capability. I want to disable ‘Manage Options’ but enable ‘Gallery’ (this admin menu is added by NextGEN gallery plugin).

    Can you please tell me exactly what to do and which line to edit in role-manager.php? Thanks so much!

  • Gravatar Blaze meinte

    @Kristoffer, make sure you have javascript enabled

    @David, you don’t need to edit role-manager to add a capability, the whole point in role-manager is to allow you to do such things through the wordpress admin interface.
    in the admin panel go to: users > roles, go to the very bottom to the section labeled ‘custom capabilities’, enter the name of the capability needed, and click the ‘create capability’ button.
    really you shouldn’t need to do any of this though. if the plugin needed a capability it probably would have created it. if you create it manually, first of all you need to name it exactly as the plugin specifies it, secondly, you can’t just make a capability and expect the gallery plugin to use it, the gallery plugin needs to be modified to use it.

  • Gravatar Kristoffer meinte

    Javascript is enabled… I also tried it on a Wordpress MU Installation, and same problem there… I would really like to have it working in my MU installation…

  • @Blaze:
    Thank you for your note - I fixed this in the developer versions some weeks ago and hope to finish with a complete new release in August. Also thanks for your answer on Davids question.

    @Kristoffer:
    The Role Manager doesn’t work with MU - see comments #20, #47 and #48, sorry.

  • Gravatar David meinte

    Hi Thomas and Blaze, thanks for answering my question. Now I understand.

  • Hi Thomas

    Thanks a lot for the plugin!

    I’d like to create a role of temporary disabled users, that won’t be able to read the blog until enabled again. So I suppose they should have the user level 0 and I should change subscriber to 1, or?
    Is it safe to do that or would if affect my blog functionality in other ways?

    I appreciate your support -

    Halina

  • Gravatar Blaze meinte

    @Halina, take a look at the following plugin, it might suit your needs better: http://sw-guide.de/wordpress/maintenance-mode-plugin/

  • Gravatar Paul meinte

    Your Role Manager is a life saver. You just solved a problem for me that I have been working hours on.

  • Hi Blaze

    That’s kind of you, but in my scenario the blog should remain accessible for some users and inaccessible for others (it’s because it’s part of a paid membership site).

  • @Halina:
    Inaccessible for users? Question: What should get a anonymous user? A anonymous user is a user wasn’t logged in in the moment. Should this user get something from your blog or not?

  • Hi Thomas

    An anonymous user can’t access the blog (I use the ac_authenticator plugin). I’d like the temporarily disabled users to see the home page of the blog, but when they click on a post they get a message that they don’t have access.

    My main question is: is it OK to change the user level for subscribers from 0 to 1, or could if affect my blog functionality in some unexpected ways? I mean, are there any functions in Wordpress that are depending on the subscriber level being 0?

    Thanks!

  • I just wanted to extend heartfelt thanks to you for rescuing this valuable plugin. I have no idea why the WP gang won’t make it a standard part of the WP distribution.

  • Just to let you know, your stat counter does REALLY BAD THINGS to my Mac Firefox. It hangs the page for at least 60 seconds.

    To wit:

    Diese Seite wurde in 1.090 Sekunden generiert.

    is not accurate. It should be:

    Diese Seite wurde in 70 Sekunden generiert.

  • Gravatar Kym meinte

    How do you add new plugins?

    I want to give access to maintaining a calendar to Editors. But it is a plugin. I tried to add it using the New Custom Capability but nothing happened.

  • How do you add new plugins?

    I want to give access to maintaining a calendar to Editors. But it is a plugin. I tried to add it using the New Custom Capability but nothing happened.

    You need to hack the plugin itself (or a gateway function to it) to use the new capability.

    Basically, all adding a new capability does is to give a response to the current_user_can('foo') function. It’s explained fairly well here.

  • Great plugin! I really like the user interface too, its nicely laid out and the icons are pretty.

    However, I am too getting the error (i think you are already aware of “You cannot remove the Edit Users capability from yourself.”, so I disable the plug-in until I need it. I’m using WordPress 2.2.

  • Gravatar Jemand meinte

    I also get the error:
    Cannot redeclare class rolemanager in httpdocs/wp-content/plugins/rolemanager/role-manager.php on line 22, referer: /wp-admin/users.php?page=rolemanager/role-manager.php Could it be that wordpress loads the plugin with ajax twice?

  • @Halina:
    Change the user_level is not the right way, in my mind of course. I think a better way is using extra capabilities for your special user. If you are familiar with theme-development you can use current_user_can. Please, read my comment above. If you are not familiar with theme-development user-level-changing can’t also help you. With User-Level-Changing maybe you can get undesirable effects for your blogsecurity. Hope this answer is a little help for you.

    @Webmaster:
    First: I don’t like such nicknames - nobody is perfect ;)
    Okay - lets go to the facts: I never saw a problem with statcounter. I checked your note on Mac’s Safari and Firefox - all is okay and the timing-values are right. And: the timing-values at bottom are values to generate a page on a webserver and don’t values for rendering a page on a browser.
    Why is Role Manager not a core part of WordPress? Only some percent of WordPress-User need this function really on their blogs. The mission is: Keep code as small as possible. This are the reasons why Role Manager isn’t a core part.

    @Kym:
    Please read also my comment #80 and this page. And yes, you need to hack the other plugin not the Role Manager!

    @Steveorevo:
    Can you explain this a little bit more, please.

    @Jemand:
    Jemand Anderes hat auf die Frage schon mal ‘ne Antwort bekommen. :)
    First remove all parts from older versions (1.4.5) when do the steps for installation. Reason: since version 2.0.0 Role Manager exists in role-manager and no longer in rolemanager (see Changelog). Remove all parts from rolemanager and you get it :)

  • Thanks Thomas, that was exactly the answer I needed.

    Best wishes

    Halina

  • Nice to hear :)

  • It’s “Chris.” I certainly wasn’t using it as a boast (although I am pretty good at this stuff). I had originally entered my email address, which was webmaster@xxx, and your reg wouldn’t let me do it, so I just chopped off everything after the mailbox.

    Hm…It doesn’t happen with any of my other browsers, but it happens EVERY TIME with this one. I have FF pretty loaded up with extensions. I have Web Developer (of course), DOM Inspector (of course), Firebug (of course), WML Browser, XHTML Mobile Profile, Fangs, Mozex and del.ici.o.us.

    Maybe it’s one of those that makes it barf. In any case, this site is the only one that it happens on. I like these extensions too much to give them up.

    Again, sincere thanks for keeping it up. I let the original developers (Henry and Owen) know about it, and they seemed thrilled. I’d suggest making yourself a bit better known at wordpress.org. No one seems to know about this, and everyone is complaining about the original plugin being broken.

  • Gravatar LostInNetwork meinte

    Critical bug found and solved: Rolemanager 2.0.8 + Gengo 0.9.1 together cause WordPress 2.2.2 to crash.

    Solution: In role-manager.php:

    function role_manager_init()
    {
    load_plugin_textdomain(’role-manager’,$path = ‘wp-content/plugins/role-manager/languages’);
    }
    add_action(’init’, ‘role_manager_init’);

    instead of the plain load_plugin_textdomain …

    Works for me.

    ps. Check http://wp-multilingual.net/download-gengo/compatibility/en/#comment-71 for the details.

  • Duh. David House, not Henry. I deal with a lot of people I’ve never met, and sometimes get them mixed up.

  • @LostInNetwork:
    Thank you for your note. I will fix this issue at the weekend and release a new version. Thank you again.

    @Webmaster Chris:
    Leave your extentions untouched. I will contact you by email to figure out the problem - and to fix it of course :)
    And then we can talk also about Role Manager, me and wordpress.org. Hope this is okay for you.

  • Gravatar alias meinte

    I’d like to see the rolemanager plugin evolve into more of a permission/access system for logged in users,

    the current WP roles are more about editing capabilities than page access

    i also notice with the role manager plugin that you can create a capability (name) but you can not delete it, is this suppose to be like that ?

  • Sorry - but I don’t talk with an alias with such a email-address :(

  • This is a great addition/fix for the original plug-in (which never worked for me). So far it’s great. Keep up the good work!

  • Thanks Sky. I will do my best.

  • Gravatar alias meinte

    Hey now, your form asked for a username and an email address that it says will not use so why give out the stuff when you don’t have to :) )

    unless you intended to do something with the email like sell it to third-party :P

    with every form on the web asking for something, i took a stand and said No he he

  • That’s a cool nice joke :)
    The form ask for a name - not a username, a homepage (if you have one) and an email-address.

    Why should I sell an email-address from a westcoast guy who lives in San Diego and uses Safari on a Mac with screenresolution from 1280×1024??? Why???

    Did you have ever heart what an open source coder sell email-addresses??? Did you look in all plugin-codes and understand them? Are all plugins save and “don*t call at home”? If you don’t trust in me then don’t use my software!!!!

  • Gravatar alias meinte

    It’s a good thing i’m using fire fox browser with screen 1024 and live in sacramento, I just love the web :) )

    well you still ain’t getting my email address, using your plugin and trusting you are two different things, I only wanted to provide you some feedback on your plugin, i don’t know you from harry and joppy the clown so don’t expect trust without buying me dinner first :P

    it’s bad enough that your making us do math just to add a comment

    besides you don’t need my email to accept a comment so it shouldn’t matter what email or username someone uses,

  • Hey, I’m the one in San Diego…. don’t mistaken it for Sacramento, further North they kinda get all wierd… especially about privacy and stuff… hell I’m the one that works for a privacy rights firm! but you can have my email ;) … LOL

  • @alias:
    It’s a nice conversation - a little bit off topic here. If you come to berlin I will buying you a dinner ;)
    Oh so sorry, I don’t know that math is a problem for you. Spam isn’t a german invention. Most spammers and their bots with v….a and c…. have ip-addresses from USA, sorry. It’s only a way to have more time - also to make a good job for the Role Manager Plugin.
    For me it is an act of courtesy using real names or good nicknames if someone do something for me. Maybe, you have an other point of view …
    But: Please respect also my point of view. And now - use “Purge unused capabilities” and give finally peace.

    @Steveorevo:
    Thx :)
    I’m waiting for your answer (Did you read my response?) With the next release you need two capabilities for using the Role Manager: “Edit Users” and “Manage Roles and Caps”. Will this help you or did I misunderstand your note?

  • hi
    im translate this plug-in to persian(farsi) language how can send to u ? please contact me . thanks …

  • Yes - I send you an email but now I saw I used a wrong receiver :( The email is on the road to you. I’m so sorry about that.
    Thomas

  • Yes, the two capabilities for using the Role Manager: “Edit Users” and “Manage Roles and Caps” will help! Excellent work! Thank you!

  • @Steveorevo:
    In the next two weeks I plain to make a feature freeze (for myself) of the new series 2.2 of the Role Manager. After this a public beta test is started, because I changed so many things.

  • Gravatar dark rd meinte

    Hello,
    Is It working with WordPress MU?
    I installed it onto 1.2.4 version of WordPress MU,
    it added Roles menu to Users tag
    And showed current roles succesfully,
    When I want to add a new role, It gave following error
    Fatal error: Call to a member function on a non-object in /var/**********plugins/role-manager/role-manager.php on line 187

  • This plugin is great. I was afraid to add other writers to help me with my blog. Now I won’t be. Thank you so much for the plugin.

  • Hi, thank you for great plugin.

    I work with a writer. I don’t want to writer to write new article.
    She can edit exists articles only.

    How can do that with your plugin?

    Thank you for help.

  • Hallo,
    Ich habe gerade Role Manager heraufgeladen und installiert. Das funktioniert prima!
    Ich wollte die französiche Übersetzung korrigieren (ich habe schon einige Plugins übersetzt ;-) http://liseweb.fr/BLOG/?page_id=160). Als ich die neue .mo Datei benutze, sind die ersten Linien nicht mehr in Französich sondern in Englisch:
    “This page is for editing what capabilities are associated with each role. To change the capabilities of a specific user, click on Authors & Users, then click Edit next to the user you want to change. You can add new roles as well.”

    Wäre es möglich, die Aktionen (capabilities) und die Rollen zu übersetzen, also in die .pot Datei hinzufügen?

  • @dark rd:
    No it doesn’t work with MU, yet.

    @Osman:
    Sorry, I don’t understand this. Please can you explain me this?

    @Lise:
    Danke. Ich schaue mir das ganze mal an. Oder hast Du vielleicht die Entwicklerversion von sf genommen? Da habe ich die Sprachdateien noch nicht neu erstellt. Das Problem könnte also auch da liegen …

  • Hi. Great plugin. I’m a little confused about the tags– why isn’t role-management.php in the 2.0.8 tag?

  • I just submitted a patch for trunk, which is neither a “developer release” or a tag, so I wasn’t sure if the big red warning box applied to me :-)

    Link to patch

  • @John:
    Thanks for your patch. (I ‘ve made your link a little bit beautiful ;) )
    role-management.php is from the developer release. The 2.0.x-series don’t have the three new pages.

    Good idea: I will add the trunk as an option. Sorry, for the big red warning box in your case. Thanks for all, John.

  • Gravatar Andy meinte

    Hi, (pointing to this post)
    with a little patch rolemanager seems to work with wordpress-mu. just added 2 lines to check if wp_roles is set. not tested very much though…
    Andy

    function handle_new_role_creation() {
    global $wp_roles;
    + if ( ! isset($wp_roles) )
    + $wp_roles = new WP_Roles();
    if (empty($_POST['role-name'])) {
    $this->error(__('You must enter a role name.'));

  • Hallo,
    ich habe die version von dieser Seite heraufgeladen (v 2.0.8)
    http://www.im-web-gefunden.de/wp-content/downloads/plugins/role-manager.zip

  • @Andy:
    Only these two lines? Thats amazing :) Which MU-Version do you have? First let me check out a problem with franche translation and when I will give you a pre-release with your two lines by email to check if it work. Thank you, so much.

    @Lise:
    Ich schaue mir die Sprachdateien noch mal genau an. Vielleicht habe ich doch schon zu viel in der 2.0-Serie geändert, so dass sie nicht mehr richtig sind. Ich schick’ Dir dann ‘ne Email. Über die Übersetzung der Rollen und Berechtigungen läßt sich streiten. Bei den Rollen sehe ich kein Problem. Eher bei den Berechtigungen. Das könnte viele Leute verwirren, da die Berechtigungen bei vielen Beschreibungen und Plugins auf Englisch angegeben sind. Aber was hälst Du davon, wenn man die übersetzten Capabilities als Hilfe beim Überfahren (Hover) mit der Maus anzeigt?

  • Die übersetzten Capabilities als Hilfe beim Überfahren mit der Maus anzeigen ist eine gute Idee ;-)

  • Hello,
    I am using you role manager plugin and really like it. My site is an educational site where anyone can register, but I have a special role, for my students how have access to certain pages that subscribers do not.

    My questions is that I want to edit the capabilities so that certain pulgin features like (the extend profile or subscriber 2) can be disabled for the basic subscriber.

    These capabilities are not listed. If I just add a capabilities with those names, nothing really happens.

    Please let me know what can I do to fix this.
    Thanks.

  • Akram:
    I can’t find your plugins in the web. Please can you give me the urls of plugins which supports capabilities and don’t work for you?

  • Gravatar Andy meinte

    @Thomas
    I have wordpress-mu-1.2.4 (latest version) installed and with the 2 lines create and delete works properly. Just the edit does not seems to work , maybe some ajax or browser problem.
    Andy

  • I have a conflict between Role-Manager and Anarchy media Player (http://an-archos.com/anarchy-media-player). Specifically the auto-hyperlink function fails. Any ideas?

    Chris

  • Hey Thomas. I am a plugin author and I get asked by users to let different roles to access plugin pages in the dashboard. I send them to your plugin but apparently this isn’t enough, my plugin must be ready too.
    I confess I never considered the problem (I am a loner blogger) and I have no clue on how to implement that inside the plugins (I am not a professional coder).
    Can you suggest me a plugin where to copy code from, or a codex page that can help me prepare my plugins for roles? One in particular is “Stray Quotes”. The plugin can create and alter tables, and modify a bunch of options - so it is safe in the hand of a administrator: but users want to add or edit quotes from its management page.

  • @Christopher:
    No, I haven’t any idea - but I don’t know the Anarchy Media Player. If i have a little bit more time I will look for it.

    @corpodibacco:
    Did you read my page with additional information? You can find also information-links in the section “Other Ressources (external)” above on this page. The best way is using the function current_user_can. Also you can look in my Plugin “IWG Extended Author List” as an example. If my answer isn’t help enough - feel free to give me a note here.

  • Gravatar corpodibacco meinte

    I didn’t know those pages. It’s all in there! Thanks a million for being so helpful.

  • Apache/1.3.27
    PHP Version 5.2.1
    Mysql/5.0.27
    Gengo 0.9
    Role Management 2.0.8

    After the isntallation of Gengo 0.9, when installing Role Management 2.0.8 will show blank pages . How should we resolve this issue? We’ve also tried Gengo 0.91a but still the same problem.

  • @Steven:

    I know this issue (see this comment). I will release a new version what fix it in the next days.

  • Gravatar Dr. Praveen Baratam meinte

    Hello Thomas,

    Thanks a lot for the wonderful plug-in. It helped me manage the users of my Wordpress site with lot of flexibility. My site is not a blog and i have chosen to use wordpress as a cms.

    I have found one hitch with the role manager. When we change the userlevel of Administrator role in the manager to something like 9 i..e lesser than 10, which is required to integrate wordpress with legacy web applications that share the db with wordpress on my site, then the Administrator role cannot manage the email options for the site. Role manager also does not provide any default capabilities assigned to ‘Manage Email’ which is a capability handled by wordpress. I would be pleased if you can do something in this regard.

    Thanks in advance.

    Dr. Praveen Baratam

  • @LostInNetwork and Steven:
    Yesterday I released Role Manager version 2.0.9. This fix the issue with blank page and now Role Manager works fine with Gengo. Hope this is good news for you:)

    @Andy:
    In version 2.0.9 I included your two lines for WordPress-MU.

    @Dr. Baratam:
    I only know one place to manage email-options: Options-Discussion. Hope this is the place you addressed in your comment ;)
    I checked this on 2.2 and on 2.3.-beta-3. On both versions I changed the admin level to 9. I can access the Discussion-Options with level 9. The needed capability is “Manage Options” to get access. The core of WordPress don’t know a capability “Manage Email”. (I checked the complete source-code of WordPress) This is the reason why WordPress don’t handle this capability. If you create a capabilty “Manage Email” it will have no effects without extra coding a plugin to handle this capability.
    I agree that only one capability (Manage Options) isn’t enough for finetuning. But my question in the moment is why you can’t access the Discussion-Options with level 9.
    I would help you to find a solution for this. Which version of WordPress do you use? Do you use extra plugins for administration?

  • If I am using role manager with Wordpress MU do I need to do anything special? Or does the patch just do what it’s supposed to when the plugin is added to MU? (Great plugin, by the way. I love it!!)

  • @Ben:
    I’m not a MU-Expert (in the moment). I put the both lines in the new release to make it easier for more people to figure out where are the problems between MU and the Role Manager.

  • Gravatar floogy meinte

    Hallo, ich habe erst vor ein paar Tagen meine erste wpmu Seite aufgesetzt, und benutze wegen dem ImageManager von Per Soderlind, Version: 2.4.1 den RoleManager Von Owen Winkler, Version: 1.4.5

    Hmm, jetzt sehe ich gerade, dass der ImageManager auf eine ganz ander version des RoleManagers verweist, und ich daher den falschen (?) installiert habe?

    Jedenfalls habe ich Probleme mit dem “remove from your yourself bug”

    Version 2.0.0 to 2.0.5
    + fix the remove from your yourself bug

    Ich werde mal recherchieren, ob ich den hier angebotenen RoleManager für ImageManager 2.4.1 verwenden kann. ( <- Ist der überhaupt aktuell? )

    Ok, Dein role-manager ist also eine Anpassung an die neueste wp version, und ist aus dem RoleManager hervorgegangen. Leider kann ich ihn mit dem PluginManager-plugin nicht in wpmu-1.2.5a installieren: “An Error occured”. Werd’s mal von “Hand” probieren.

  • @floogy:
    Das Role Manager Plugin unterstützt WPMU momentan nicht. Du kannst es maximal unter /plugins/ in WPMU installieren. Aber dort funktioniert es nicht wirklich. Bei den Autoplugins von µ (/mu-plugins/ geht es definitiv nicht. Da fehlt nicht nur eine zusätzliche Datei sondern die Pfade stimmen nicht.

  • Gravatar floogy meinte

    Ich habe den RoleManager nun unter /plugins/ installiert.

    Der Fehler mit dem pludinInstaller-plugin ist wohl darauf zurückzuführen, dass das alte RoleManagerplugin auch schon in dem Ordner /role-manager/ installiert war. Nachdem ich das umbenannte in rolemanager, klappte die - manuelle - Installation.

    Das funktioniert allerdings nur unter wpmu.domain.de, also die ursprüngliche wpmu Seite, unter blog1.wpmu.domain.de geht das nicht, auch nicht als admin.
    Die Blogs die ich bereits anlegte können mit dem RoleManager also nicht bearbeitet werden, nur der “admin”-Blog (Installations-Blog), dort funktioniert auch das umschalten der einzelnen Rollen.

    Ich hoffe, dass Du bald die wpmu Integration schaffst, das würde enorm helfen. Danke für Deine Arbeit an diesem Plugin.

  • Thanks..
    […] AçÄklamalÄ 232 Wordpress eklentisi (Agu. 15, 2007 !!) (Wordpress plugin list),[…]

  • Hi Thomas,
    I want to create an internal multi-author-blog for dedicated readers only. Idea is that Readers register and then the Admin sets them as Readers. I have tried a combination of Angsumans Authenticated Wordpress Plugin (only registered users get access to the blog) and removing read-capability from the subscriber role. This does not work. Any Ideas how I could do this?

  • @Cedric:
    I don’t know Angsumans Plugin but I read a little bit on his website. First I saw that his Plugin is only tested on 1.5 and 2.0 of WordPress. But I read also some comments with statements what the Plugin works with newer WordPress-Versions. But on no place I can’t find the information for disabling the read-capability. I think asking Angsumans can be more helpful for your situation.

  • Gravatar Dana meinte

    I was curious if there is a way to allow an editor roll to edit the sidebar, but not the core site template?

  • The Role Menager is great, I have is Wordpress 2.2.3 and this plugin work great

  • Gravatar Bryan meinte

    Hi Thomas, great work on the plug-in! I have the same concerns as Murph’s Mom (#51). I want to restrict the ability to change roles/capabilities. I don’t want people who have the edit_users capability to be able to change other people’s roles (specifically the administrator’s). These people can also access the Role Manager plug-in admin page.

    In March 2007 you said you’d be fixing this in a future release. Any updates on that? Thank you!

  • @Dana:
    This is not a Role Manager problem. WordPress core doesn’t support this. Do you want allow the role editing the sidebar-template or something on a sidebar-widget?

    @Bryan:
    This is not a fix - this is a new feature :) If you use the code from trunk - at your own risk of course - you get this feature. At next weekend I plan to release the second developer release and after that I intend to create a new pot-file for translaters and finishing the new Role Manager internal help. If you use the current stable release, you have only the way to disable the Role Manager after you are finished with your setup.

  • Gravatar greekvisualarts meinte

    Hi Thomas, I have been using your great plug-in for some time now! I have just installed a test blog with Wordpress 2.3, before updating my real blog. I was very happy to see that Role Manager is included in the core of this new version.
    1.Does this mean I do NOT have to install your plugin anymore?
    2.When upgrading to v2.3 must I first disable and uninstall the existing role manager plugin?
    3.Should I be looking for your updates here and if yes how would I apply them to my blog?
    And for the bonus question. I love the way I can preview my comment underneath. Where can I find the plugin for this? Thank you

  • @greekvisualarts:
    No, the Role Manager is not part of WordPress 2.3 core. Where is the place you has download your copy of WordPress? Can you see the Role Manager on your Plugins-Page? Which version do you see?

  • Gravatar greekvisualarts meinte

    Hi Thomas,
    Too much work and not enough sleep produce funny results. PLZ disregard my last comment about your plugin being part of wordpress 2.3 I installed it so automatically I forgot I did.
    Still, fill me up about your comments preview plugin. Thanx

  • @greekvisualarts:
    No problem :)
    The Plugin is “Live Comment Preview“. But I don’t kow if it is working with WordPress 2.3.

  • Gravatar Dana meinte

    @Thomas:
    I would like them to be able to edit the sidebar widgets

  • @Dana:
    That I imagined ;) The core of WordPress don’t support this. You need additional coding or a plugin for this. But I don’t know such a plugin, sorry.

  • Great plugin!

    Question: I’ve taken away the ability to “publish” anything for a certain group. Now, instead of “publish” they get “submit for review”.

    Is there a way I can add, to my dashboard page, a note that’ll let me know that something’s awaiting approval?

  • Gravatar Paul Collins meinte

    THanks for the great plugin, couldn’t live without it!

    I am having trouble with one thing recently. The “delete others posts” option is not working, if I uncheck this feature, the editor can still go in and delete other people’s posts. The only way I can stop it is if I uncheck the “delete published posts” option, but I want the editor to be able to create and deleter their own posts.

    thanks

  • Gravatar Simon meinte

    Hi there,

    Your plugin appears to be causing a problem with the new “Submit for review” feature in WP 2.3. We’ve have given authors the following rights: Read, Edit Published Posts, Edit Posts, Unfiltered HTML, Delete Posts and Upload Files. This means they may not publish posts directly, as you see. So in WP 2.3, when they create a new post, they don’t see the “Publish” button, they will only see the “Submit for Review” button. This goes well if a new post isn’t saved as draft before submitting for review. However, if a post is first saved as draft, and then the author clicks on the “Submit for Review” button, the post gets published right away instead of being submit for review. I’ve tried this on a clean WordPress without your plugin, no problems there.

    Do you have a fix for this, or a way to fully uninstall your plugin (with default user roles)?

    Thanks for your time.

  • Gravatar Simon meinte

    I have been testing some more. Apparantly “Edit Published Posts” causes the problem. When I disable it all goes well. So I’m guessing this might be more of a WordPress-bug, as apparantly WordPress sees draft-posts als published now. Nevertheless, the problem only occurs when using your plugin (and thus editing the roles/capabilities). Maybe you want to list it as a know issue for other people with this problem.

  • @Mike:
    I don’t know, but I think it should be possible with some lines of code.

    @Paul:
    This looks like a WordPress Bug. Which version of WordPress do you have?

    @Simon:
    Simon, thank you to point out this. I believe that my answer will not please you, sorry :(
    First the technical part:
    The issue happens also if you create a new post and wait for the first autosaving. If you pressing the “Submit for Review”-Button after this time, the post will also gets published. Yes, it is right - the capability “Edit published Posts” causes the problem. You can find the sourcecode in /wp-admin/includes/post.php in function edit_post, Line 69:

    
    if ('publish' == $_POST['post_status'] && !current_user_can( 'edit_published_posts' ))
                            $_POST['post_status'] = 'pending';
    

    This was the technical part.
    I’ve talked with some people about your problem. All of them are the same opinion as I. If you don’t trust a user, don’t give him the capability “”Edit published Posts”. Why not? You don’t trust your user - this is the reason why you taken away the capability “publish”. After reviewing you publish his draft. If the user has now the capability, to edit this published post, he can change everything without you get a notice about that. Where is the reason for your first review if a user can change everything after it is published? I my mind, this breaks your control about your blog in any case.

  • Gravatar deep.thought meinte

    Hi,

    I was hoping to allow subscribers to view their profile only. How ever by default their is a link to the Dashboard. I was hoping that rolemanager would enable me to stop subscribers accessing the dashboard.

    I have tried creating a capability but nothing happens.

    Any suggestions?

    Regards,
    Steve.

  • No, the wordpress core don’t know something like “Hide Dashboard”. But I remember a plugin called “Hide Dashboard” but I can’t find this at the moment.

  • Thanks for the prompt and honest response Thomas.

    I found a fairly simple and effective way to stop subscribers going to the dashboard (although the dashboard tab still shows).

    open /admin/index.php and line two says -

    require_once('admin.php');
    add this line straight after that -

    if (!current_user_can('level_10') ) wp_redirect("profile.php");

    Now, even if they try accessing the page directly via url it will Keep redirecting them to their profile.

    Regards.

  • Gravatar Simon meinte

    Thanks for your reply Thomas. I understand your point, however, at the blog where we encountered this we just want to control the number of posts per day. The articles posted are fairly long and our authors put a lot of time and effort in them, so we want to make sure each article gets the attention it deserves. It’s not really a matter of trust, it’s a fairly professional and serious blog. However, often an author wants to correct something in his article, so that’s why we do give them the right to edit their own posts after publishing.

    I will look into WP’s core to see if I can hack it. Far from the prettiest solution but I guess I don’t have another choice.

    However, I still think this is a bug in WP since users can publish posts without having the right to do so. Apparantly the saving tricks the system into publishing the post without having the right to do so. I’ll post it on the WP forums soon.

    Thanks for sorting it out!

  • Gravatar Ulysses meinte

    Hi Thomas,

    Let me thank you for doing such a good job in developing Role Manager. There is something that I would like to get working though … is it possible to disable ‘Write’ and ‘Create New Page’ options for a User Role? I’m trying to create a role that allows it’s user to edit existing pages, but not create new ones. How could I acheive this?

  • @deep.thought:

    Today I released a new Plugin “IWG Hide Dashboard” to handle this without hacking the code :)

    @Simon:
    Can you give me the link to your forums post. I want monitor it.

    @Ulysses:
    Did you set the right author for the page?

  • Gravatar Simon meinte

    I just posted it Thomas, here’s the link:

    http://wordpress.org/support/topic/137716

  • Gravatar Ulysses meinte

    Did you set the right author for the page?

    If I understand you correctly Thomas, the pages are set to ‘Editor’ privelages and I have the following options enabled:

    NextGEN Manage Gallery
    NextGEN Upload Images
    NextGEN Gallery Overview
    Edit Private Pages
    Edit Pages
    Edit Published Pages
    Edit Others Pages
    Read
    User Level: 10

    Yet, although the Editor user can edit the existing pages, there certainly seems to be no way of disabling the ability to create/write new pages. Is there perhaps a walkthrough that might shed some light on how to do this exactly?

  • @Simon:
    Thank you for the link. An other way is to post it on the trac as a new bug.

    @Ulysses:
    Try it with an single user first. Imagine you have an user called, Anton. Create as Administrator a new page and set Anton as the author for this page. Go to Antons profile and remove the capability “Edit Pages” and “Publish Pages” and set the capability “Edit published Pages”. Anton now should can edit the page you created before, but shouldn’t create a new page.
    Try this on a regular page and not a page created from an other plugin.

  • Gravatar Érik meinte

    Nice work. Thanks.

  • Gravatar Thomas meinte

    Hallo!

    nach dem aktivieren des Plugins konnte ich nicht mehr in das Pluginmenü (Du hast nicht ausreichend Rechte, um auf diese Seite zuzugreifen.) obwohl ich alle Rechte besitze. Ich kann jetzt meine Plugins weder aktivieren noch deaktivieren. Habe ich bei der Installation etwas falsch gemacht? Meine Wordpressversion ist 2.3 DE

  • @Érik:
    Thanks, back ;)

    @Thomas:
    Ich glaube Du hast da was anderes verstellt … Der Role Manager macht bei seiner Aktivierung nichts. Jedenfalls nichts an irgendwelchen Berechtigungen. Hast Du oder Deine Rolle die Berechtigung? Schau mal unter Deinem User nach, ob Du da nicht separat die Berechtigung entfernt hast. Du kommst zu den Berechtigungen für einen einzelnen User - auch Deinen - nicht über Profil sondern über “Autoren & Benutzer”. Dort mußt Du Deinen User auswählen. Am Ende der sich dann öffnenden Seite siehst Du die Einzelberechtigungen für Deinen Benutzer.
    Und: Plugins kann man auch einfach dadurch deaktivieren, in dem man sie aus dem plugins-Directory löscht. Aber das wird Dir in Deinem Fall nicht viel weiter helfen …

  • Gravatar Thomas meinte

    Super, danke für deine rasche Antwort!

    Du hast zu 100 % Recht, ich hab schon alle Plugins vom Verzeichnis gelöscht - ich komme trotzdem nicht weiter. Irgendeine Einstellung wurde in meiner Datenbank verstellt, ich weiß allerdings absolut nicht wo und was?!?!

  • Gravatar Ulysses meinte

    Thomas,

    Is it just me? but when I disable ‘Edit Pages’ the ‘Manage’ tab is completely missing and thus the user cannot edit any published pages … or in fact, any pages.

  • Thank you for working on this plugin.

    I want to set a post as “premium content” but don’t see how to do it. Is there a how-to file someplace?

  • @Ulysses:
    My information was for posts and I can’t see differences for pages. But I’m not able to try it in the moment.

    @Mary:
    This is the way. But: knowledge for theme-developing is needed.

  • Thomas,

    Thank you for the link, but I’m not sure I understand. That comment looks as though it deals with creating new roles. What I want is simpler, I think.

    In the roles check list, one of the options is for a premium content subscriber. I can set a user to be a premium content subscriber, but I can’t figure out how to make the content “premium.”

    Thanks!
    Mary

  • does anyone know what the correct way to control the POST-AVATAR plugin is? I want only Administrators to be able to use Avatars.

    Regards
    Darren

  • @Mary:
    I don’t know a capability “premium content”. And where is the “Roles Check List”? Do you use an special plugin?

    @Darren:
    Please ask the author of the “post avatar plugin”.

  • Gravatar alias meinte

    I found one major issue, it doesn’t reset the default WP roles after you deactivate it, I”m happy to say bye bye to this plugin

  • @alias:
    Back again!? This isn’t a bug - it’s a feature. And some people need this feature.

  • Fantastic plugin. I’m loving it. You rock so much.

  • Gravatar Ryan meinte

    Hello, great plugin!

    However I’d like to ask, is it possible to allow editors to editor other user profiles, but disable them from editing other user roles?

    Currently I have a couple of “editors” who can editor user profiles but they can also see their own roles.

  • I have a big problem… I used this plugin on wpmu and renamed my admin account and now I can’t login at all… wp-admin keeps redirecting until it dies… other users can still login but i’m locked out… I restored a prev db backup of my wp-users/wp-user meta table and still nothing… any ideas would be great…

  • Hallo Thomas,

    vielen Dank für Dein tolles Plugin! Es läuft super. (WP 2.2.3)

    Eine Frage dazu: Kann man User von der Kommentarübersicht im Backend ausschließen? In der Kommentarübersicht werden nämlich e-Mail Adresse und IP Nummer der Kommentatoren angezeigt und wir möchten nicht, dass das jeder sehen kann. Ich habe schon versucht, das in der edit-comments.php auszuprogrammieren, aber das hat nicht geklappt. Einfacher wäre es, wenn die User die Kommentarübersicht garnicht erst sehen. Kann man das irgendwie über den Role-Manager steuern oder bräuchte man dafür, wie für das Dashboard, ein separates Plugin?

    Viele Grüße,
    Rita

  • @Ryan:
    With Role Manager versions 2.0.x you have to disable the Role Manager after editing Roles and Capabilities, because all users with capability “edit_users” also can using the Role Manager. Next version (will be released in some days) you need an extra capability for the Role Manager.

    @Bart:
    The Role Manager don’t works with wpmu (see also many comments here). But I’m working on a special version for wpmu.
    Which µ you are using? Did you use the Role Manager as normal plugin or as autoactivated plugin? Is your login a sideadmin-account?

    @Rita:
    Ich kenne das Problem durch die Kommentare von Idaho Falls (erster Kommentar, zweiter Kommentar). Leider habe ich im Moment auch keine Lösung :( Mit dem Role Manager lässt es sich so jedenfalls nicht lösen. Man benötigt ein zusätzliches Plugin. Allerdings kenne ich keins, das diese Aufgabe löst. In nächster Zeit werde ich vermutlich selber vor dem Problem stehen. Solltest Du also ‘ne Lösung oder einen Ansatz haben/finden würde ich mich über ‘ne Info freuen.

  • @Bart again:
    You have to restore also the the options table of your blog, eg wp_1_options. The set with roles, eg wp_1_user_roles, is important. WPMU needs an Role called Administrator. I don’t know why in the moment, but this Role is important if you are a side-administrator. Without this Role you can’t login on your primary blog but you can log in with your account on an other blog.
    I hope this will help you.

  • Thomas, schau mal hier:

    http://wordpress.org/support/topic/119659?replies=6

    Viele Grüße,
    Rita

  • Gravatar PUNKER meinte

    Ich begrüsse, Thomas!
    Ich habe auf die russische Sprache Role Manager übersetzt, schreiben Sie mir auf die Post, damit ich ihn Ihnen übergeben konnte!

  • Hallo Thomas

    danke für das hervorragende Plugin! Ich habe da ein Frage:

    Ich kann ohne Probleme eine neue Berechtigung anlegen. Aber welche Berechtigung diese neue Berechtigung hat, das kann ich nirgendwo festlegen. Mache ich einen Denkfehler, wenn ich sage, dass diese Funktionen dann irgenwie sinnlos ist :-(

    Nein im Ernst: Muss ich die Berechtigungen hardcodieren? Wie ich auch eine neue Usergruppe (Role) hardcodieren kann??

    Danke vorab!

  • Gravatar James meinte

    This plugin has saved me a lot of time. Amazing job! Keep up the good work.

  • Gravatar hurry meinte

    Thomas, I installed the latest Role Manager on 2.3 and tried to switch on and off the Role of the Contributor about Publish Posts. And to my surprise, the Write Post page new-post.php link has disappeared forever for the contributor even after I switched on Publish Post in the Role Manager. I tried Deleting Role Manager and it still does not show up Write Post for the Contributor like it did previously without Role Manager. I am totally frustrated and I want to know how I can revert back to the previous default admin menu for the contributor role. Please please help asap.

  • Gravatar hurry meinte

    Which table(s) do I restore to get back the default Contributor admin menu? Please tell me in exact detail how to solve this problem as I am a novice at mysql etc. Thanks and awaiting your reply.

  • Gravatar hurry meinte

    Fortunately, I had a latest database backup. I restored it and the problem is solved. I suggest that WP users backup their database before installing Role Manager. Thanks.

  • @Holger:
    Ich verstehe die Frage nicht so ganz. Was meinst Du mit “hart kodieren”? Also eine Rolle “hart kodieren”?
    Neue Berechtigungen müssen natürlich auch irgendwo im Programmcode ausgewertet werden. Einfach eine Berechtigung anlegen reicht natürlich nicht und ist daher etwas sinnlos. Du musst schon dafür sorgen, dass sie auch irgendwo ausgewertet wird.
    Wenn Du z.B. eine Berechtigung “nur ich” anlegst, kannst Du innerhalb Deines Themes Dinge nur für Dich anzeigen lassen.

    @hurry:
    I was a few days on holiday, sorry.
    I tried this and can’t see your problem. I imagine, that you have disabled this on your profiles page too. Did you verified all your capabilities at your profiles page?

  • Gravatar Johannes meinte

    Bug in RoleManager2.1.1? Kann Benutzer nicht bearbeiten:
    A velid capability name can only have letter, digits and space

    Komischerweise bekomme ich diese Fehlermeldung beim Editieren von Benutzerdaten - also bei einer Tätigkeit, die nicht direkt was mit Roles & Capabilities zu tun hat! Ich will Benutzerdaten auf wp-admin/user-edit.php ändern, klicke auf “Benutzer ändern” und lande auf der wp-admin/user-edit.php Seite. Die Seite ist leer, und der Seitenquelltext besteht einzig und allein aus der oben genannten Fehlermeldung.

    Der Fehler tritt sowohl bei mir lokal (MacOSX, XAMPP Apache2, Php5.2.1, Wordpress2.3, Role-Manager2.1.1) als auch auf der Production Site (Linux, Php4.4.7, Wordpress2.3, Role-Manager2.1.1) auf.

  • @Johannes:
    Eigentlich ist das hier der falsche Platz für dev-elease-Fehlermeldungen. Besser ist der Bugtracker bei sf.net.
    Beim Speichern auch der User-Einstellungen werden die per POST übermittelten Daten (also auch die Capabilities) auf ihre Gültigkeit überprüft. Wenn da ungültige Zeichen drinne sind, kommt es zu dieser Fehlermeldung.
    Kannst Du mir mal die Liste mit den Capabilities des Benutzers, bei dem das passiert, zukommen lassen?

  • Gravatar Ryan meinte

    Since I renamed some authors’ roles, I can no longer write posts for them using the administrator account. If I edit their post, it replaces their author name with another one. Do you have plans to fix this, so authors with renamed roles show up in the administrator’s “edit post” form’s author drop-down list?

  • @Ryan:
    First please remember: The Role Manager doesn’t change any from the core-functions. This is reason why I can’t fix this.
    But your comment looks like a little bit as if you have did more as rename a role, eg. removing the capabilty “publish posts” from this renamed role :) If so - you should give my Plugin “IWG Extended Author List” a try. Otherwise please give me the informations: WordPress version, old role-name, new role-name and all capabilities of this role.

  • Tanks, i try

  • The options menu doesn’t show up for me. I seem to be lacking the “manage_roles” capability, probably due to having previously used the old RedAlt Role Manager.

    How can I easily add this capability back to my role?

  • @Viper007Bond:
    The old one from RedAlt? Which WordPress-Version? The complete options menu doesn’t shown? For the complete options menu the capability “Manage Options” is needed. Role Manager doesn’t change anything on this capability. Did you try the older 2.0.9 version of the Role Manager (Download via sourceforge)?

  • Gravatar Kyle meinte

    Hello.
    Your Role Manager is great so far.
    I have only run into one problem.
    I would like for the Editor to be able to ADD and EDIT users, but do not want them to be able to modify the admin.
    Right now If I allow an Editor to Edit and Add users then they are able to make themselves Admin and make the Admin an Editor.

    How can I stop this, but still allow them access to Add/Edit/Delete an Editor or below?

  • Gravatar alias meinte

    Hey I got some ideas to improve your plugin, if you would, consider it as a personal favor to me he he :P

    I’ve been trying ways to work around the plugin and just user it for user levels and not so much for the capabilties, blasphemy yes I know but hey a dude has to make bread out of hairballs ya know :)

    Here’s my idea, a way to not interrupt the default WP roles,capabilities etc, what I did was add 5-6 more roles in addition to the default, that way if for any reason I have to disable the plugin all i would have to do is delete the roles created and the default ones should be fine (in theory). It might be a good idea to recommend users to do this.

    There’s just one challenge when creating several new roles, the page gets very long since the capabilities are directly under the Role.

    If possible for future releases, could you make it so the capabilities are hidden unless clicked on the title say using javascript or something, this would clean up the browsing page nicely and you can deal with one role at a time when wanting to work with capabilities.

    Maybe even use a dropdown menu for the roles, hey I had to ask :)

  • @Kyle:
    I know this problem for a long time. Extra coding a special plugin is needed in the moment, since the core of wordpress say: if you can edit users, you also can change their roles too. A way to say: this roles are allowed roles here, is needed. I’m working on a solution for wpmu to handle this. (but this work has a low priority for me)
    If the solution is ready for make it public I will release a plugin for normal WordPRess and µ.

  • Gravatar Kyle meinte

    @Thomas - Thank you for the quick reply.
    So, do you by chance know of a way to hack the core file users.php to stop this type of behavior?
    I don’t mind reworking the change for each new release.

    Thanks!

  • Hi, great plugin, very useful.

    I just upgraded to Role Manager version 2.2.0 (WP 2.3.1 wasn’t noticing me about the more recent version, i used 2.0.9 before) and I get a memory exausted php error on “General information about your Roles and Capabilities and this Plugin” page:

    Fatal error: Allowed memory size of 25165824 bytes exhausted (tried to allocate 32 bytes) in /myroot/home/wp-includes/capabilities.php on line 192

    Of course I could raise the limit, but it sounds weird to me to exceed memory limit of 24MB with just some statistics…

    Anyway, Everything seems to work
    Thanks,
    Alessandro

  • Gravatar Claudio meinte

    Using yuor plugins “Role manager” and “Hide Dashboard”, I have the following message, the Dashboard is visible but the tab of Dashboard is hide.
    Can you help me ? Thank

    Warning: Cannot modify header information - headers already sent by (output started at /home/mhd-01/www.zobeide.it/htdocs/parcoindustriale/wp-admin/admin-header.php:16) in /home/mhd-01/www.zobeide.it/htdocs/parcoindustriale/wp-includes/pluggable.php on line 331

  • Gravatar floogy meinte

    Hi,
    thank you very much for your efforts to bring role-manager to wordpress-mu. Did this patch suffice? Is 2.2 ready for WordPress-µ?

  • Gravatar floogy meinte

    Alessandro mentioned, that he got problems with memory usage after upgrade. I want also upgrade to 2.2.
    Is it secure to delete the plugin, and copy the new one into the word press-mu plugin-mu folder instead of the plugin folder?
    Will this kind of different upgrade keep also the database stored roles intact?

  • Gravatar ovidiu meinte

    hello, after upgrading from 2.0.5 as far as I rememebr to 2.2.0 every time I want to change the capabilities of a certai nuser and click update, I get this error:

    A valid capability name can only have letters, digits and spaces

    here is the list of my capabilities:

    NextGEN Change OptionsNextGEN Change StyleNextGEN Edit AlbumNextGEN Gallery OverviewNextGEN Manage GalleryNextGEN Upload ImagesNextGEN Use TinyMCEAccess On MaintenanceActivate PluginsAudit TrailCreate UsersDelete Others PagesDelete Others PostsDelete PagesDelete PostsDelete Private PagesDelete Private PostsDelete Published PagesDelete Published PostsDelete UsersDownload BackupsEdit FilesEdit Others PagesEdit Others PostsEdit PagesEdit PluginsEdit PostsEdit Private PagesEdit Private PostsEdit Published PagesEdit Published PostsEdit ThemesEdit UsersImportManage BkpwpManage BackupsManage CategoriesManage CformsManage DatabaseManage EmailManage LinksManage OptionsManage PollsManage RatingsManage RolesModerate CommentsPublish PagesPublish PostsReadRead Private PagesRead Private PostsSlimstat OptionSlimstat ViewSwitch ThemesTrack CformsUnfiltered HtmlUpload FilesUse MochaWp PhpmyadminWpadsZensor Moderate

    using wp 2.2.3

    any ideas?

  • @Kyle:
    Yes as a plugin ( and without changing the core code ) ;)

    @Alessandro:
    You get the “new version notice” only for plugin where are in the repository at wordpress.org. Role Manager isn’t in because I can’t disable the discussion feature at the plugins page at wordpress.org. Such a feature (the discussion for a plugin at wordpress.org) splits the discussion in more as one place and make it harder for the maintainer (plugin author) and the users to follow the conversion and bug reports. Unfortunately the “Plugin Release for …” from Weblog Tools Collection stops to release every day a news :(
    Thank you for the note with the memory limit. I will check this on a local testmachine of mine. Don’t raise the limit - the statistic isn’t so important - but it should works, of course. :)

    @Claudio:
    This isn’t a Role Manager problem. And also not a problem from “Hide Dashboard”. Did you change one of your plugins or corefiles with an wrong editor? You get this line if you have an empty line on a file after the closing ?>. You should look in one of your files from the error message you got.

    @floogy:
    No, the 2.2. isn’t ready for µ. I’m working on a µ-version because I need it on µ too ;) . If you browse the Role Managers svn at sourceforge you can find a really first alpha for µ based on 2.2.. But use this with care and not in your production enviroment! This is important. The µ version comes as an autoactivated plugin to store in mu-plugins and not in plugins. I never saw the memory message from Alessandro on my development machines. But I don’t know in the moment the memory limit of it. I will look later and tell Alessandro and you more about my emory limit and a way to fix the issue.
    Last note: I’m looking for some µ-Administrators/Hoster to help me a little bit on Role Managers µ Version. If you want do so and help me on µ - you are welcome :)

  • @ovidiu:
    Cross-Posting :)

    Can I contact you by email to get the list as plain text? Is your email-address stored by your comment the right one?

  • Gravatar ovidiu meinte

    what exactly do you mean by cross-posting?
    and yes you can contact me by this email address.

  • @Alessandro & floogy:
    My testmachine has a memorylimit of 24 MB too. Hmmm :( Alessandro: the error-message is generated by capabiliy.php from the core. How many users do you have on your blog? Did you get any output from the general-page? Can you sent me a screenshot (My Email is im-web-gefunden without the “-” at Google Mail Service :) )?

    @ovidiu:
    Cross-Posting means we wrote at the same time and you submit your comment some minutes before I submit my answer. I was a little bit confused to see a different comment (your new one) after submitting my answer :)
    I will sent you a short debugging-plugin later today to make it easier for you to generate the output.
    Why: I believe a different plugin register a capability and this capability has other as the allowed signs. If I/we found this plugin I will contact the other plugin-author to change this. And hope he will do so :)

  • Gravatar floogy meinte

    Hi Thomas,
    cross-posting means indeed something different, it’s often not tolerated in the internet community and violates in some cases the nettiquette:
    http://en.wikipedia.org/wiki/Cross-posting

    You meant something different, as you explained in your post.

    EDIT: Ooops:

    Other meanings

    A second meaning has evolved on some internet message boards. Crossposting (also known as x-posting) occurs when two persons post responses to the same message thread at almost the same time, often rendering the slightly later post irrelevant, funny, meaningless or inappropriate.

    A third meaning involves posting the same material to two or more different blogs.

    I want to help you with the wordpress-mu developement as a tester. I’m very new to all these stuff, and I’m not a programmer. Nevertheless I use debian based linux since 2002 on a regular basis. I’m more of an illustrator or so called designer.

    I don’t got the memory error like alessandro, but I was afraid of it, because I want to upgrade to wpmu 1.3 and rolemanager 2.2.

    If I want to upgrade to the current rolemanager-for-wpmu-svn ;-) , can I upgrade the rolemanager plugin in plugin/rolemanager-2.0.9 to plugin-mu/rolemanager-2.2, by simply deleting plugin/rolemanager-2.0.9, and creating plugin-mu/rolemanager-2.2?

  • Gravatar ovidiu meinte

    you got me completely confused by now.

    :-) first I thought you meant the first meaning of cross-posting, meaning I had posted in two different places with the same problem, but I did not. then you explained we posted at the same time, and as you said you were answering I was looking for another one of my posts but I only had one here?

    I got you now and am waiting for the debug script you mentioned.

  • Gravatar floogy meinte

    I guess, your post wasn’t there, or you’re altered it, while Thomas posted/wrote his post… ;-) Maybe he wanted to answer also to your post in the earlier post? Hypothesis, though.

  • @floogy:
    Thank you for your help on my stupid “cross-posting”. Now I remember on mailinglist-administration and the term “crossposting”. Sorry.

    Your µ question: Yes you can upgrade on this way. Delete the old one and put the new one (from svn) in mu-plugins. But don’t forget the single toplevel file role-manager.php in mu-plugins, because it is important. And: Use it with care and not on a real life µ site!.

    @ovidiu:
    Sorry for the confusion. It was my failure.
    I sent you an email with an attached debugging plugin to easier find the wrong name.

  • Gravatar floogy meinte

    Hi Thomas,

    actually I didn’t know about this term, how it is used in forums and the blogger scene ;-) . As I already mentioned in the quote: The term cross-posting has got other possible meanings than just the definition used in ML’s and in the usenet. So, your definition is also right. I’ll keep that possibility in mind, the next time this term appeared in discussions ;-) . You’ll never stop to learn.

    I’ll test the role-manager svn on a new or copied/upgraded wpmu 1.3 test install on my local host.

  • Gravatar Deirdre meinte

    I just downloaded this plugin. I love it, but I’m having a couple of problems.
    When I try to add a new “role” no matter what I type in it says this
    “A valid capability name can only have letters, digits and spaces”
    I am only putting in letters. What might be the problem? I’m using the latest WPversion.
    Thank you !

  • @Deirdre:
    It’s a problem if you use the Role Manager 2.2.0 and the NextGen Gallery together. I wrote the author of the NextGen Gallery Plugin a email last night to fix this issue together. Now I’m waiting for an answer.
    If you don’t use both plugins together, please can you tell what’s happens if you make a copy of an existing role?

  • Hi and thanks por the great plugin.
    I have a question which is similar to the ones posted by Murphs Mom and Susan (above). I read your answer to both, but still could not find a way (another plugin?) to fix this. Can you help some more ?

    So, my question is, how can I have the user which has the “edit user”, “create user” and “delete user” capability not be able to touch (or create) users above a certain role level (for instance, only able to edit subscriber or contributor roles?). I understand this may be out of the scope of your plugin, but is there a specific way to get this result, even with another plugin ?

  • Gravatar Jerry meinte

    Hi, I was running Role Manager 2.0.9, but just upgraded to 2.2.0. We’re using Wordpress 2.3.1. As soon as I activate 2.2.0, I get an Internal Server Error on the plugins page. Do I need to remove 2.0.9 data before upgrading? Is there a way to do with without editing the database (our blog is hosted & we don’t have direct database access), or is there an upgrade script? Thanks!

  • @Ricardo:
    And Kyles, too. At the moment no solution for this exists but I’m working on one (look at my answer on Kyles questions).

    @Jerry:
    I never saw such an error and nobody of the other users post a similar failure. Did you used an special plugin installer or something else?
    Normally you remove the old plugin sources from your filesystem and put the new one at the same place. No database editing is needed. Also it is easy to fallback to an earlier version: remove the new sources and restore the old sources from the earlier version. You can get the old release (2.0.9) from sourceforge.
    Also in case of a fallback no database editing is needed.
    Role manager 2.2.0 is developed on 2.3 and 2.3.1.. Did you changed anything else on your system? Can you take a look into your servers log file?

  • @Thomas

    I don’t know why, since installing Role Manager all html code, like and , also in my comments area are getting unfiltered. My default user is “Contributer”, ONLY with six capabilities: Moderate Comments, Publish Posts, Delete Posts, Edit Posts, Edit Published Posts, and Read.

    The Unfiltered Html capability is unchecked. Also, i’ve tried to unchecked the Unfiltered Html capability for the Administrator, but it still happened.

    Its very odd, ’cause it still happened even the Role Manager plugin has deactivated (i believe it still in the database/cache?), another odd is it happened ONLY in comment area, and NOT in the post area. :(

    You can see the example in my comment area here:
    http://aufklarung.org/computer/hardening-wp-prefix-table-changer-role-manager.mspx#comment-167

    It’s the output of CommentLuv plugin, what make it really odd is the output of CommentLuv plugin before i installing Role Manager is totally normal, look below:

    http://aufklarung.org/computer/hate-hackers-too.mspx#comment-138

    So, can you give some explains for this problem?. Thanks you.

    Cheers,
    K

  • Could I use Role Manager to make the Wordpress site a users only site? Could I use this plugin to make all blog posts accessible only to people who are logged in?

  • Gravatar Carlos Chegado meinte

    Hi,

    I just installed this plugin on a new wordpress 2.3.1 website and got fatal error when activating this plugin.
    What can cause that error?
    What can I do to fix this?
    What do you need to know in order to fix this as soon as possible?

    Thanks in advance.

  • When clicking “User” in the dashboard of wordpress 2.3.1 it displays “Assign Extra Capabilities” along with updating the profile info and after pressing “Update” I receive this message:

    “A velid capability name can only have letter, digits and space”

    Valid is spelled incorrectly when output. I didnt change anything on the file or on the extra capabilities to create this message. All I did was select Uses, then Edit and then I selected update cause i didnt want to change any capabilites or features through the role manager

    Feel free to email me in response to this bug notification

  • Hallo,
    tolles Plugin. Leider habe ich ein Problem damit! Ich benutze das Plugin Google XML Sitemaps auf meiner Seite. Seit ich Role Manager 2.2 installiert habe wird die Optionsseite von diesem Plugin nicht mehr unter Optionen gelistet und wenn ich versuche manuell darauf zuzugreifen bekomme ich als Antwort, dass meine Berechtigung nicht ausreicht. Ich habe auch schon versucht auf Role Manager 2.0.9 zurueckzugehen, aber das nuetzt nichts. Ich braeuchte da etwas Hilfe!
    Danke!!

  • @Kaka:
    Sorry, but I can’t find differences between the output of the comments. Comments are independent from Roles if you are not logged in. The Role Manager doesn’t changes anything on your comment- or menu system directly. If you change a roles capability - maybe this can deny or grant you the access to some parts of your WordPress.
    What happens if you deactivate the CommentLuv-Plugin?

    @Matt:
    I don’t understand your “users only site”? Maybe the comments from Halina can help you.

    @Carlos:
    This is the second time a user comments such an error. But I need more information. All my questions you can read here. Note: I don’t got an answer from Jerry :(

    @George:
    The “velid” is an typo :) But this comment may help you. At the end of this week I will release a new version to fix this issue for users with the “NextGen Gallery” Plugin.

    @Boris:
    Hast Du vorher mit Version 2.0.9 gearbeitet oder war Version 2.2.0 die erste, die Du benutzt hast?

  • Ich hab vorher 2.0.9 benutzt.

  • Thomas, I think that one might be a huge help, thank you for the reference.

  • Well i dont have the issue that your referring to involved with the NextGen Gallery Plugin. It could possibly be another plugin that is giving the issue

  • Gravatar Dave meinte

    I am also experiencing the “Fatal Error” message when attempting to activate this.

    PHP Version : 5.0.4
    WP Version : 2.3.1
    Role Manager Version : 2.2.0
    Installed Plug-In : Akismet, MiniMeta Widget

    The message is displayed in the message area when you attempt to click activate
    the full message is:
    “Plugin could not be activated because it triggered a fatal error.”

    No third party plug-in was used to attempt to install role manager.
    Not sure Carlos and my own error messages are related to Jerry’s, the Fatal Error message is generated by Wordpress .

    Any other information that you would like?

  • @George:
    I will contact you by email to get some special information from you. I hope this is okay for you.

    @Dave:
    Thank you for your information. I will look for this and hope to fix it together with the cap-check for “NextGen Gallery”.

  • Gravatar Mystica meinte

    hi there
    i just wanted to know how can i grant subscribers the rights to add links?
    now if i select “manage links” and login as subscriber, i can also edit and delete links
    how can subscribers access only this page:
    http://www.addictivenoize.com/wp-admin/link-add.php
    ?
    thanks

  • Gravatar Winfried meinte

    Hello,

    we are using WP 2.3.1 DE-Edition and the Role Manager 2.2.0. When I edit Users, created before we use the Role Manager, I got the message:
    “A valid capability name can only have letters, digits and spaces.”
    The Database was changed to utf8 in the last days. If the problem exists before we change the database to utf8, is not known. The “NextGen” Plugin is not installed. We use the Plugins “Calendar” and “myGallery” together with the Role Manager. When I disable the Role Manager Plugin, I can modify my old existing Users.

  • Wow, wirklich cooles Plugin, Danke!

  • Hi Thomas.

    Although I don’t have installed “NextGen” plugin, I’m experiencing the same problem discussed before. In my case, I think “Organizer” is causing the conflict.
    When I try to assign any “Organizer” capabilites to a user I get the message:
    “A valid capability name can only have letters, digits and spaces.”

    Is there anything I could do in order to help you fix this?

    Thanks in advance.

  • Hi Thomas.

    In the meantime I found a solution for my problem in one of the comments left on Organizer’s homepage.
    Here’s the link: http://imthi.com/organizer#comment-10893

  • The problem that ricardom and others have mentioned also arises in combination with Advanced Category Excluder

  • Gravatar lukas meinte

    I am interested in plugin mentioned by Thomas in comment 63. The plugin that prevents an user from editing or removing the post he added after conditions f.e. after the first comment added - where could i find this plugin? Regards.

  • Hi Thomas,

    there is an “inference” issue in your plugin, even the last version.

    You check the “edit_users” capability to attach the subadmin menus, but then you use the “manage_roles” capability to actually output the content of the admin pages.

    This behavior produce an inference issue: if I give ‘edit_user’ cap to a user, but not the ‘manage_roles’ cap, he can infer the presence of a functionality not allowed to him. This is an unwanted behavior from a security viewpoint.

    I think you should fix it (by replacing ‘edit_users’ with ‘manage_roles’ in add_submenu_page calls within the admin_menu function of your plugin).

    Anyway, many thanks for your effort. Your plugin is very useful.
    See you.

  • WordPress-Version : 2.3.1
    WordPress-Db-Version : 6124
    Role-Manager-Version : 02.02.00 (131584)
    PHP-Version : 4.4.4

    preg_replace : yes

    Igot the same problem:“A valid capability name can only have letters, digits and spaces.”

    Capabilities to be included:
    NextGEN Change Options
    NextGEN Change Style
    NextGEN Edit Album
    NextGEN Gallery Overview
    NextGEN Manage Gallery
    NextGEN Upload Images
    NextGEN Use TinyMCE
    Activate Plugins
    Create Users
    Delete Others Pages
    Delete Others Posts
    Delete Pages
    Delete Posts
    Delete Private Pages
    Delete Private Posts
    Delete Published Pages
    Delete Published Posts
    Delete Users
    Edit Files
    Edit Others Pages
    Edit Others Posts
    Edit Pages
    Edit Plugins
    Edit Posts
    Edit Private Pages
    Edit Private Posts
    Edit Published Pages
    Edit Published Posts
    Edit Themes
    Edit Users
    Ezstatic Execute
    Import
    Manage Categories
    Manage Cforms
    Manage Links
    Manage Options
    Manage Roles
    Moderate Comments
    Premium Content
    Publish Pages
    Publish Posts
    Read
    Read Private Pages
    Read Private Posts
    Switch Themes
    Track Cforms
    Unfiltered Html
    Unfiltered Upload
    Upload Files
    Wiki Edit: abel to created “Wiki Edit” with no slash, dosen’t work

  • Gravatar Linda Petersen meinte

    Hi to all, great plugin, but how can i assign capabilities to plugin.

    For example Im using AWSOM News plugin (http://www.awsom.org/awsom-easier-news/).

    I want to make Editor role to have rights to use this plugin. I saw that for some plugins i have an options like: Organizer, Democracy, Manage Polls…

  • @ALL :) :
    Many, many thank your for your comments. They are very helpfully. It seems that to many other plugins using capabilities with spaces. Today I released the version 2.2.1. of Role Manager. This version should help you to manage this situation better, because now you have a configuration option to permit spaces in capability names. Please read also my todays post about the new version and the spaces problem.
    I hope this new version will help you.

    Now some notes for special notes. All other should be answered with Role Managers new version. I hope so :)

    @Mystica:
    You need an special plugin for this, but I don’t know such a plugin.

    @lukas:
    I don’t released the plugin because nobody ask for it. It was a quick and dirty hack and I’m afraid it is removed from my hard disk :(

    @Nemo:
    It seems what you are using a developer release of Role Manager. 2.2.0 using a function called user_has_permissions to check if the user has the caps “edit_users” and “manage_roles”. Only if the user has this caps together the menu will be displayed. 2.2.1 the same. Try it :)

    @Linda Petersen:
    In no way. You need some changes in the code of the plugins.

  • Gravatar Linda Petersen meinte

    Ok, but how can i recognize witch plugins are compatible with Role Manager? Do you have a list with them?

    If I need to insert some simple code into plugins code witch is it?

    Thanks aganin.

  • @Linda Petersen:
    No, I don’t have a list. Some information about the code you can find at my developer information-page in the section “For other Plugin-Authors”.

  • Hi Thomas thank you for your terrific plugin.

    I am looking for a way so that a Role’s posts will always fall under a particular category.

    I tried your plugin and the closest I can get is making a new Role with specific Capabilities (this is great!), but apparently i cannot limit the categories the Role can choose.

    I have been looking at capabilities.php. Is the answer there? Or can I edit the Role’s post-new.php to exclude all categories except one?

    I hope you can point me in the right direction. vielen Dank! (hope I said thanks correctly :)

  • @gabriel:
    You should look for a plugin like “access by category“. I hope, that “access by cats” will help you.
    Yes, you said “vielen Dank” correctly :)

  • thanks Thomas!

    I’ve installed the plugin you mentioned however I’ve encountered 2.3.1 version issues, specifically it results in ‘wp_categories doesn’t exist’ errors when I try to access the admin pages.

    I tried making a fix but it has resulted in further issues. I’ve left a comment and now I’m waiting for a reply.

    If you or anyone else knows of any other similar plugin I’d be very interested to learn of it. Thank you!

  • Very nice plugin :-)

    I have WP 2.3.0 and rolemanager 2.2.1, but I still having a problem
    I want a user to be able to write and edit own posts, but when I set the edit_post enable(I havn´t found any way to do it otherwise), they are also able to see comments, and the IP´s in the comments view, and I dont want them to be able to see that. Do know how I can prevent that ?

  • Gravatar Jonathan Eunice meinte

    I’m not clear on the logic of dis-allowing underscores as part of the Role name. We use them to add clarity. Even if we accept a need to not use underscores, now that we have them in our Role names, Role Manager won’t let us rename to anything else.

  • Gravatar Habib meinte

    Hello my friend

    Thanks for your good site and very usable plugins.but i have one problem with your “role manager” plugin.

    How can create the user in site( wp site ),just can write a new post and edited theme,and can’t see the comment page or any more page.

    Very Thanks
    Bye

  • Gravatar Mattz meinte

    Hi,

    I’m using this plugin on WPMU 1.3 and I don’t see any rule applied on a user that is set to specific role.

    When I make a new role, set everything on disabled and attach this rule to the user… the user can do still everything.

    No errors in the php-errorlog.

    Any idea ?

  • Great plugin. Bravo, Thomas. I wrote a post about role manager and co-author.

  • Hi folks,
    I’m back again now :)

    @Gabriel:
    No, I only know this plugin. Maybe I code a new one - many people looking for a solution.

    @Gitte:
    This is an old core-problem of WordPress. You can read some notes and find a link to a trac-issue above in the comments on this page.

    @Jonathan Eunice:
    They are many reasons for dis-allowing underscores - security, clarify (I see a smile on your face now :) ) and some more, alos from the core of WordPress. Role Manager do also some other thinks to improve the clarity: spaces at start/end of a role name removing, double spaces between words in role names are replaced with a single space and so on. But I recognise the problem if you want rename a role. A quick and dirty solution is to using the obsolete role manager 2.0.9 (from sourceforge) to rename the roles.

    @Habib:
    Some parts you can hide if you remove the needed capabilities from the user and for other parts you need plugins such as my IWG Hide Dashboard.

    @Mattz:
    This isn’t a µ-version. You can find a developer version of the role manager at role managers svn repository at sf. But you should familiar with svn and so on. And: Don’t use it on any of your µ’s with customer. I will don’t help you if something goes wrong! This is important for you!

  • Hi Thomas,
    It sounds like you have a great plugin here. My question is this:
    I need to be able to allow an author access to one page (possibly more) and nothing else, no posts or anyting. When the autor logs in i want them to be able to edit their page andtha’s it.

    Would your plugin accomplish this for me? Or do you know of one that would? Many thanks in advance for your help/advice.

    I’m using WP 2.3.1

  • I do not want editors to edit or manage comments. But the tab Comments just go away if I turn off Edit Posts. I know you will fix it on the next version, but how can I fix this quickly?

    Thank you.

  • Hello Thomas,

    I have found a little mistake in the Wordpress plugin ‘Role-Manager’ Version 2.2.1 file role-manager.php for the translation. there is mentioned (by example: sprintf(__(’Can\’t create the new Role. A Role with the name %s already exists.’,'role-manger’),
    I have replaced ‘role-manger with ‘role-manager’. So the tranlation works ok now.

    With Regards,
    Anja

  • Gravatar Karin meinte

    This plugin looks great, but where can i find who to make a new capability? I want to make some new roles based on the subscriber role.
    I want to add the capacity that subscribers with this new role have permission the look certain posts and pages. I need different roles with different permissions to see the posts. Boss may see all posts, almost boss may see almost all and plus-subscriber can only see a few. Normal subscriber and guests are not allowed to see the posts. All this posts have the same category (e.g. intranet). I want to exclude guests and normal subscribers from this category - so i need a capability to exclude them form category with ID=x. And for the others i like to have a capability to have exclusive rights to see posts with categories with defined ID’s.

    I hope you understand what i mean and can help me out with this. SO far i only discoverd how to give a capability a name, but not a ‘function’.

  • Gravatar Ryan Paul meinte

    I want to use this plugin to hide one of the admin menu options for podPress. I’m not entirely great at php. Can you help me and let me know how?

    Thank you :)

  • Gravatar david meinte

    Great plug in, but seems to have critical bug - when editing a post in “pending review ” status, upon resubmitting for review - the post is actually published!

    Checked this with permissions set so publishing isn’t even an option, and the publish button is not available to the user. Initial create post & submit works ok, but subsequent edit makes it published, as if the submit button is functioning as publish button

  • Hi, sorry for not responding sooner. We figured out our problem. Our hosting provider had PHP set to 8MB of memory and had turned off error display. So, all we saw was a 500 internal error message when enabling the plugin used slightly too much memory. We changed the configuration to 16MB & it works fine now.

    Thanks!

    Edit: I just saw David’s comment above. We too were having a problem with a previous version of Role Manager where the “Submit for Review” button actually published the post. We haven’t tried it yet with 2.2.1, but it sounds like the problem might still exist?

  • Is there anyway we can use role manager to control the sidebar options of “contributors”? What I would like to do is hide the options “Draft” and “Private” under the “Post Status” and just have the “submit for Review”.

    The other thing I would like to do is hide plugins I have installed from showing on “Contributors” visual toolbar when they “write” a post.

    Is there anyway to do this with role manager?

  • Do you accept donations to thank you for/support this plugin? If so, tell me how. :)

  • Gravatar Marci meinte

    I want my user to be able to edit a page (not a post) and yet have it return to DRAFT status for approval, not just edit and have it published immediately. How can I acheive this? The user does NOT have permission to publish pages, and I don’t want them to. I want all pages to be approved by admin. Looks like this has been requested/reported before, but I don’t see a solution. Thanks in advance. :)

  • Hallo,

    habe leider Probleme mit dem Plugin. Wenn ich z.B. eine Gruppe kopieren will oder die Rechte eines Users unter Benutzer ändern will, z.B. wenn ich verhindern will das gleich der Artikel veröffentlicht wird, kommt beim entfernen des Hakens und bestätigen folgende Fehlermeldung:

    A valid capability name can only have letters, digits and spaces. Try Role Managers “Spaces allowed in Capabilities” option.

  • Gravatar role-user meinte

    Hi,
    I’m trying to install the last role plugin 2.2.1 with WP 2.3.3 and I get a ‘Fatal Error’
    Some idea or advice?
    Thanks.

  • Gravatar role-user meinte

    Ok. We have solved it.

    require_once(’role-management.php’);

    Changed to:

    require_once($_SERVER[’DOCUMENT_ROOT’] . ‘/wp-content/plugins/role-manager/’ . ‘role-management.php’);

    Any solution more intelligent or elegant?.
    Thanks.

  • Gravatar Darren meinte

    Nice plugin, but I have found a fault, somewhere, everytime you add a new plugin, some of the old capabilities that were previously DEACTIVATED are REACTIVIATED. Is this normal, or have a configured something wrong. It only seems to do it with the Post Avatar plugin from another developer???

    Any ideas

  • Hallo zusammen!
    Hab mir vor ein paar Tagen den Role Manager von hier heruntergeladen, installiert und aktiviert. Dann, als ich später nochmal zu meiner Plugin-Übersicht wechseln wollte, war auf einmal der Plugin-Reiter im Dashboard verschwunden! Hab den Role Manager danach deinstalliert, hat aber nix gebracht, ich kann meine Plugins immer noch nicht aufrufen :-( Wäre sehr dankbar, wenn mir irgendjemand helfen könnte!
    LG, Bekki

  • I noticed that earlier versions did not use the plugin notification routine in WP 2.3+

    Are the newer version going to be used to notify on new versions?

    Thanks!

  • What a nice Plugin, Thx for coding this nice one!

  • Hallooo? Kann mir denn keiner helfen???

  • Gravatar Sven meinte

    Thank you for this Plugin. This will really help me to reduce at least some of my teaching load.:-) This Plugin is working great, however, there is one little issue that I would like to bring to your attention:

    I am assigning my students roles that allow them to edit and delete posts (their own posts) - however, they cannot publish posts. To do that, they would have to submit their post for review. (great so far).
    If the students decide to save their copy to a draft (for example because they have not yet finished writing their entire post), finish that post lets say later at home, and click the submit for review button, that post will then be published. This means that I will not review the post before it gets published…

    Is there a setting that I am missing? Thanks, Sven

  • Great plugin, thanks! Does this plugin allow people to submit posts (drafs) via email but an admin needs to approve/publish the post?

  • Hi Thomas,

    I’m having a problem getting role manager working, have you seen this before?

    http://gallery.menalto.com/node/75063

  • Bei meinem Problem (2.2.08) habe ich leider auch noch keine Lösung gefunden. Auch nicht in Foren, leider. Das Plugin wäre mir sehr nützlich gewesen, da ich mit einigen neuen Autoren “umgehen” muss.

    Problem:
    Wenn ich z.B. eine Gruppe kopieren will oder die Rechte eines Users unter Benutzer ändern will, z.B. wenn ich verhindern will das gleich der Artikel veröffentlicht wird, kommt beim entfernen des Hakens und bestätigen folgende Fehlermeldung:

    A valid capability name can only have letters, digits and spaces. Try Role Managers “Spaces allowed in Capabilities” option.

    Schöne Grüße
    Holger

  • Muchas gracias excelente

  • Fantastic plugin Thomas, thank you very much for this.

    Will be featuring this plugin on blog shortly.

    Very happy WordPress user

    Jamie

  • Gravatar Gavin meinte

    Hi, I’ve been looking at Role Manager and Disclose-Secret to try to set up groups of users who can see posts in their own group only. Would you recommend that I create a new role for each group, e.g. groupA_member, and then use Disclose-Secret to restrict access to the posts to users with that role? Is there a better way of doing this? What if a user belongs to more than one group? Any advice you can give would be appreciated. Thanks, Gavin

  • How do I allow user to edit a published page and then submit it for a review ? I denied the publish page capability and it still publishes the page.

  • Gravatar Juno meinte

    Hallo,
    ich habe ein Problem, das vielleicht mit diesem Plugin zusammenhängt.

    Ich habe eine Nutzergruppe erstellt, die nur lesen kann, aber auch private posts. Wenn ich aber jetzt einen Post schreiben will, tauchen die alle rechts in so einer Box als “Post Author” auf. Und der erste Name wird automatisch als Autor des Eintrags verwendet. Während ich als admin gar nicht auftauche. Aber außer mir hat keiner die capability einen post zu schreiben!

    Ich wäre dankbar für jede Hilfe.

  • Gravatar toqueboy meinte

    i’ve been using this for awhile and have found it a great compliment with Disclose-Secret. I am curious about accomplishing a nested role system. I would like to create a ‘greater’ role that would allow a user to see the content that i’ve designated to ‘lesser01′ and ‘lesser02′…i want to do this so that i can group roles for a user to allow them to see posts they were not allowed to see before without having to go back and change the ‘user’ or ‘role’ definition in each post.

    anyone with any ideas? i’d really appreaciate your insight.

  • hi,
    will this work with wordpress 2.5 ? :)

  • Hi,

    I see from the description that this plugin only allows a user to belong to one role at a time. I am setting up a Wordpress site that will use a membership software (aMember) to assign a user to a pre defined role.

    The way I am setting this up I really need the ability to have a user belong to more than one role. Does anybody know of role manager plugin that will allow this or is this a limitation of the Wordpress core functions?

    Thanks in advance for any help on this!

  • Gravatar kingston meinte

    Hi,

    Thanks for your work on the plugin first. Awesome. I am not the first time to use this plugin. But when I install this plugin in my newsite, I cannot save any setting(like role, cap…) I am not sure what ’s wrong. Here is my info:
    WordPress-Version : 2.3.3
    WordPress-Db-Version : 6124
    Role-Manager-Version : 02.02.01 (131585)
    PHP-Version : 5.2.5

    preg_replace : yes

  • Hi Thmoas - excellent plugin but I am having some problems.

    I have the following settings:

    WordPress-Version : 2.3.3
    WordPress-Db-Version : 6124
    Role-Manager-Version : 02.02.01 (131585)
    PHP-Version : 4.4.8

    preg_replace : yes

    Help-URI : http://www.gfiapac.com/wordpress/wp-admin/users.php?page=role-manager/help.php

    I am using the following plug-ins

    BM Custom Login 1.0
    Disclose Secret 2.4
    Exec PHP 4.5
    Front Page Login 1.1.1
    IWG Hide Dashboard 1.0.2
    Login Stayput 1.0
    NextGEN Gallery 0.91
    NextGEN Gallery Widget 1.21
    Role Manager 2.2.1
    Wassup 1.4.9

    I am getting a ‘Done but with errors on the page’ message on the Roles page (http://www.gfiapac.com/wordpress/wp-admin/users.php?page=role-manager/role-management.php)

    The errors are:

    Line: 469
    Char: 75
    Expected: ‘)’
    URL: http://www.gfiapac.com/wordpress/wp-admin/users.php?page=role-manager/role-management.php

    The error repeats on the following Line/Char combinations

    670/68
    871/68
    1072/73
    1273/72
    1474/67
    1675/71
    1876/71

    Any ideas where my problem lies? I am not a PHP expert (far from it) so any guidance would be extremely helpful.

    Many thanks

    Leon

  • Gravatar smita meinte

    When a contributor tries to post by pressing the button “submit for review”, the post seems to go nowhere. As Admin I can’t see it in order to moderate it! Please help

  • Gravatar Takuhii meinte

    wordpress 2.5 seems to fix the problems I was having in wordpress 2.3

  • Hello.

    Any chance to update your plugin to work for wordpress 2.5??

    Silla!

  • Gravatar jp meinte

    hi thomas,
    great plugin. Thanks! But I have one problem. I set the status of one page to private and enabled the user via the role manager to see a private page. But it doesn’t word.
    Can anyone help me?

  • @Scyfox:
    The Role Manager should works with 2.5. Maybe you have some layout issues - I will fix this soon. Or do you have other problems?

  • Gravatar Stefan meinte

    Hallo,
    ich habe das plugin in WP 2.5 installiert. Zuerst dachte ich es funktioniert einwandfrei, aber dann kam es anders. Wenn man einen User oder eine neue Rolle abspeichern will stößt man oft auf die Fehlermeldung:
    “A valid capability name can only have letters, digits and spaces. Try Role Managers “Spaces allowed in Capabilities” option.”
    Dabei trifft diese Meldung auf die aktuelle situation garnicht zu.

    Das anhaken/abhaken der NextGenGallery bei den Rollen funktioniert auch nicht. :(

    gruß

  • Gravatar songdogtech meinte

    Hello, I’m using WP 2.5 and would like to be able to use Role Manager again. I made the change in code in comment #334 and still get fatal errors, without reference to files or lines of code. Is there an available fix for this? Thanks, Mark

  • Thats not for 2.5. And I never saw the error from #334 on all my blogs. I will make some more tests on 2.5 and if the need a new version of the Role Manager it well be released on Wednesday next week.

  • Thomas, That would be great :) My WP 2.5 install is on PHP 4.4.0, if that might be the cause of the fatal error. Send me a version of Role Manager if you’d like me to test it before release. Thanks, Mark

  • Excellent Plug-in Thomas,

    I’ve run into one possible bug. I’ve set the Editors role to not be able to add/delete users of any kind. Only Administrators have this capability. The delete users restriction works great, but Editors are still able to add users. Any idea why that might be?

    Below is my specific setup info if it helps:
    WordPress-Version : 2.3.3
    WordPress-Db-Version : 6124
    Role-Manager-Version : 02.02.01 (131585)
    PHP-Version : 4.4.8
    preg_replace : yes

    Thanks again for a great plugin!

  • Gravatar Matthijs meinte

    Hi, I may have found a bug in the plugin with wp 2.5. I have a users group which is allowed to:
    - Edit Published Pages
    - Read
    - Upload Files
    - Edit pages

    With wp 2.3.3 and earlier I used this to have a group of people that were able to only edit their own pages. So as the admin I would create a page, say /users/thomas/ and then I’d give thomas his login and he would be able to edit that page, but not other pages.

    However, since upgrading to wp2.5 a strange thing happens: whenever a user logs in and goes to his page and Saves it, the page is immediately set to “private” (the checkbox keep this page private is checked). Even when a user unchecks that and tries saving it again, the check is back.

    Only when I log in as the admin, I can unset the private page. I think it has something to do with how Wordpress 2.5 changed the roles and publish flow.

    Any ideas?

    Thanks for the great plugin by the way. Have you ever had contact with the wordpress guys to get this integrated by default?

  • Gravatar Chelle meinte

    I upgraded to Wp 2.5 today and seem to have lost the role capability when creating posts or pages. Is the functionality different?

  • hello,

    I am running WP2.3.3, and have encountered a bug (or problem).

    I have changed the “subscriber” role to not allow access to anything. (This way, users must by physically approved by me to “contributor” level).

    So, when I have a new user, they see the WP screen that says “you on’t have access to this”. But if they just reload the page, they can surf/browse anything they like.

    Any ideas?

    Thanks.

    —-
    text translated from English to German with Google Translate:

    Hallo,

    Ich arbeite mit WP2.3.3, und haben einen Fehler (oder ein Problem).

    Ich habe nun die “Teilnehmer” Rolle nicht zulassen, dass der Zugang zu etwas. (Auf diese Weise müssen die Benutzer von physisch, die von mir zu “Beitrag”).

    Also, wenn ich einen neuen Nutzer, sie sehen die WP-Bildschirm, die besagt, dass “on’t Sie haben Zugang zu diesem”. Aber wenn sie sich einfach die Seite neu laden, können sie surfen / stöbern, was sie wollen.

    Irgendwelche Ideen?

    Vielen Dank.

  • Hi Thomas! I have a little problem… I locked myself out of my blog by attempting to create a new role above the others. now, it won’t let me into the admin area though i did it by cloning the admin with everything checked. I took away some of the admin priorities, which was a bad idea, so I can’t undo what I did that way. Anyway around this?

  • Hello, Just tried the new release 2.2.2 and still get fatal errors, referencing line 20 in role-manager.php. Tried the code change in comment #334, too. Is this maybe because I’m on a server with PHP 4? (WP 2.5) Thanks, Mark

  • Gravatar Elm meinte

    Hallo, ich habe folgendes Problem: Nach dem Aktivieren des PlugIns konnte ich den Blog lediglich noch betrachten, aber nicht mehr auf die Admin-Ebene zugreifen. Immer nur: “Du hast nicht ausreichend Rechte, um auf diese Seite zuzugreifen.”

    Ich habe das PlugIn dann runtergeschmissen: keine Änderung.

    Ich habe dann im in den Kommentaren den Tipp gefunden, in der Datenbank folgendes zu ändern:

    “Also mußt Du nach dem Eintrag meta_key=wp_capabilities für
    die user_id 1 suchen. Da steht bei Dir im Moment wahrscheinlich
    folgendes als meta_value drin:
    a:1:{s:13:”administrator”;b:1;}
    Das mußt Du ersetzen durch:
    a:2:{s:10:”edit_users”;b:1;s:13:”administrator”;b:1;}”

    Ergebnis: nix.

    Habe dann das PlugIn wieder aufgespielt. Die Folge: “WARNING: Unexpected character in input: ‘in /role-management.php on line 392″

    HILFE! Welche Möglichkeit bleibt mir noch?

    Meine WP-Version ist 2.5

    Vielen Dank! Elm

  • @songdotech:
    Did you really created an extra directory for the role manager? Did you set the permissions right for all files and subdirectories? This isn’t a problem of PHP 4.

    @David Paul Ellenwood:
    This is a bug in the wordpress core. The new admin interface from 2.5 of WordPress isn’t so good and has many bugs. I’ve created today a new trac ticket for this issue. A solution is also included. You can find my ticket on trac.

    @Matthijs:
    This is also a bug of WordPress “brand” new core. I hope the core developer will help you if you create a ticket for your failure.

    @Chelle:
    Sorry, I don’t understand your problem.

    @mitchellirons:
    Never seen this. But what was the reason for this settings? Maybe, we can find a other way for your situation.

    @Greg:
    Do you have an database backup? The most important is one row in wp_options, called “wp_user_roles”.

    @Elm:
    Das Plugin macht nichts von alleine. Da hilft es auch nicht, so zu tun, als wenn man nichts gemacht hat :(
    Nimm mal Deine händischen Änderungen zurück und spiel# einfach von Deinem DB-Backup die Zeile wp_user_roles wieder in die wp_options zurück. Dann geht auch alles wieder …

  • Gravatar Matthijs meinte

    Thanks for your reply Thomas. I will check out Trac and see if I can post the bug.

  • Gravatar Matthijs meinte

    By the way, what makes you so sure that it is a bug in the core? I cannot reproduce the bug without using the Role manager plugin, so for me it’s hard to explain why it would be a problem in the core of wordpress. You can be right, but since I’m not familiar with the code of the plugin or the core of wordpress I would not know. Care to elaborate?

    I can see if I can find something in the code myself, but that’ll take some time, obviously.

  • Can I request like some others have that you add Role Manager to the WP Plugin Repository so that updates show up in WP and can be automatically updated?

  • Gravatar Michelle meinte

    Hi - I’m having trouble resetting “editor” capabilities. I want my editors to be able to edit others’ pages as well as all posts, and though I set their permissions to be able to do that, they’re still not allowed to edit each others’ pages. They can edit each others’ posts.

    I reset the editor capabilities list, surfed away from the edit capabilities page and back, and little green check boxes appear in the right places, so I think I did that correctly. I’m not sure what else to do. Here’s my system info:

    WordPress-Version : 2.5
    WordPress-Db-Version : 7558
    Role-Manager-Version : 02.02.01 (131585)
    PHP-Version : 4.4.8

    preg_replace : yes

    Is there any fix for this or am I just doing something wrong? Thanks for your help.

    Michelle

  • @songdotech: Did you really created an extra directory for the role manager? Did you set the permissions right for all files and subdirectories? This isn’t a problem of PHP 4.

    I set the new folder “role-manager” to 755 and the files to 644 or a bit higher, and still get the error that role-manager.php can’t locate role-management.php. Don’t know what else to try. I set the permissions of role-mananger.php to 755 to test and it crashed all of WP.

    Curious…..

  • Gravatar jp meinte

    Hallo Thomas. Nochmal meine Frage: Ich habe mittels des Role Managers einem User die Rechte “Read Private Pages” und “Read Private Posts” gegeben. Ich habe dann eine Seite (z.B. die Seite “/?page_id=2″) auf den Status “als Privat markieren” gesetzt. Allerdings kann der User mit den oben angesprochenen Rechten die Seite dennnoch nicht sehen. Woran liegt das?

  • @jp:
    Ich habe das mit WordPress 2.5 ausprobiert. Bei mir funktioniert es ohne Probleme. Kannst Du mal bitte alle Berechtigungen des Users und Deine WordPRess-Version hier posten. Falls Du das nicht willst, schick’ sie mir per Email.

  • Hallo Thomas!

    Ich hab gelesen, das du mal vorhast das Plugin für WPMU anzupassen. Bist du schon dazu gekommen? Frage, weil ich gerade anfange mit mit WPMU zu beschäftigen und da hätte ich auch gern dein Plugin mit dabei :)

    Danke und viele Grüsse!
    M

  • I get a fatal error when trying to activate on my 2.5 installation as well. It doesn’t tell me anything more than that.

  • Gravatar paul meinte

    hi, thanks for plugin. i am on wp 2.5. i have a new role with ‘publish posts’ and ‘read’ enabled. however when these users login there is no link for them to write new posts. is this something to do with the plugin? I want these users to be able to write posts, but not edit them. thanks.

  • Those fatal errors in WP 2.5 must have had something to do with PHP 4, as I just upgraded my server to PHP 5 and Role Manager works fine now. Either the issue was PHP4 or some configuration of that version of PHP, or a configuration of PHP5 - Songdogtech

  • Gravatar Matthijs meinte

    Hi Thomas, if possible, could you look at my questions? How are you so sure that the bug I mention is not caused by the plugin? I cannot replicate the bug without the plugin, so it’s difficult to put a ticket for that on the trac. Or could you point me in the direction where I could look in the code of the plugin to try and find a solution? Thanks.

  • Thomas, thank you for a terrific plugin!

    After we have upgraded to Wordpress 2.5, Authors that had “Edit Published Pages” capabilities assigned to them could no longer Edit these pages without approval from either an Editor or the Administrator. We did find that IF we allowed Authors to Publish both Pages and Posts that they could then edit their own pages.

    Is there a Page Status Capability that we can set up to allow Authors to edit their own pages?

    Thank you.

    Cynthia

  • Hallo Thomas - Ich hab Dein Plugin installiert und es läuft soweit eigentlich alles bestens. Doch was bedeutet eigentlich die ability, “premium content” zulassen zu können?

  • @Matthijs:
    Roles are containers for granted capabilities. With the Role Manager you can only create or modify combinations of granted capabilities for a role. The core or an other plugin makes checks against capabilities for the current user in different situations, eg. publishing a modified page. If you or the developer modifying the core of WordPress your original combination of granted capabilities maybe don’t works no longer. The admin interface of WordPress 2.5 is heavy changed and some bugs are in it. Whats happened in 2.5? Let’s go to look here. The red lines are the removed code from 2.3.3 and the green lines are new in 2.5. White lines are unchanged. If you look for red line number 67 you can see the check against “publish_pages”. The new code - green line 75 - makes a wrong check, because this is a check for “publish_posts”. This is the reason, why I’m so sure the failure is in the core and not in the Role Manager.
    By the way Matthijs, to open a trac ticket you don’t need to know the sources. A good description of the problem will be are a help for the developer.

  • Gravatar Matthijs meinte

    Hi Thomas, thanks for the explanation. That makes it a bit more clear. I couldn’t place a ticket yet because I didn’t even know if it was the plugin or the wp code itself. I’ll take your description and add it to a trac ticket. Hopefully it can be solved in 2.5.1. Thanks again for the help.

  • Gravatar Matthijs meinte

    Ok, I added a ticket to the wordpress trac yesterday. But looking today I saw that it has disappeared. Can they delete trac tickets? And why? I clearly described the problem, even referenced the file, etc.

  • In some cases you only want users to ‘Edit Posts’, some cases only ‘Edit Pages’.

    I’ve found a problem that uploaded files (attachments) cannot be deleted unnless the user has ‘Edit Posts’ permissions.

    This is an issue if the user only have ‘Edit Pages’ permissions, as they can not delete the uploaded files.

    This is on 2.3. How can I correct this?

    Thanks.

  • Gravatar jp meinte

    @thomas: hatte dir ne mail geschrieben. Bekommen?

  • @songdogtech:
    Thanks for your info. I will do some more tests on PHP 4.

    @Cynthia:
    This is the same problem as reported by Matthijs.

    @Matthijs:
    The ticket is closed and Ryan has patched this for 2.5.1 and the trunk. You can see it here and here. But I made some more tests and this changes will not fix the problem right. Tomorrow I will reopen or create a new ticket with some more patches to fix the problem completely.

    @David Paul Ellenwood:
    My patch is included in 2.5.1 and the trunk. It will be fixed with 2.5.1. ;)

    @Adam M:
    Please open a trac ticket on wordpress.org because this is a failure in the core sources of wordpress.

    @jp:
    Du solltest ‘ne hinreichende Mail bekommen haben ;)

  • Hello, and thank you for a fantastic plugin! I’m sorry I can’t post in German, but I’m sure your English is far better than my German anyway!

    I’m having a problem with private posts and pages. I have created two user groups. One I want to be able to read private pages and posts and the other I want to be able to read private pages only. I have the corresponding marks ticked in their user capabilities, but the private pages and/or posts still don’t show up when I log in as one of those user types.

    Both user groups are running at user_level 2. Is this to do with Role Manager? I feel like I’m just missing something. Or is it to do with WordPress?

    I’m running RoleManager 2.2.2 on WordPress 2.5.

    Thanks very much,
    Leslie

  • Gravatar karin meinte

    Hello,
    Is it possible to make a role where one can only post in specific categories?

  • Gravatar mike meinte

    Hi,

    I am using Role manager with Nextgen gallery and would like to know how I can specifically set up role manager to allow a user only to have access to an assigned gallery.

    I added a ‘capability’ but from what I can see I cannot define what that capability is. Please help me if you have a minute.

    Thanks,
    Mike

  • Gravatar Michelle meinte

    Hi Thomas,

    I commented a while back with a problem I have where users cannot edit other people’s published pages, though their permissions are set so that they should be able to.

    I noticed several other issues were with the WP 2.5 code, so I upgraded to 2.5.1 tonight - but I’m still having the problem.

    Is there anything I can do about this? Thank you!

    Michelle

  • @Leslie:
    Can you access the pages if you typing the urls of them in the browsers address-bar after you logged in as such a user?

    @karin:
    You need an other plugin for this, called access by cats.

    @mike:
    This is a question for the NextGen-Plugin-Author, sorry.

    @Michelle:
    This isn’t a Role Manager problem. To figure out where the problem is in the core of WordPress I will send you an email. We should work on an patch for the core together :)

    @Cynthia and Matthijs:
    WordPress 2.5.1 came out too fast for my patch. If you are interested, I can send you two changed core files for 2.5.1 for testing. Please give me a note here.

  • Gravatar Yann Lossouarn meinte

    Hello Thomas,

    First, thanks a lot & congratulations for this plugin, which should indeed be integrated into WP core !

    However, I have a problem : I work on a site (not published yet) with WP2.5.1. I want Authors to be able to read private posts and private pages, and Editors to be able to edit private posts and private pages. I created a few pages and posts (some are private, some are public). The plugin seems to work like a charm with posts, but private pages don’t show in the menu, even when logged as Admin/Editor/Author… If I manually set the URL as an Admin/Editor/Author, I can access the private pages, and edit them (except as an Author -> this is ok).

    Any idea ?

    Best regards,
    Yann

  • @Yann:
    I don’t hope so. Because many good old plugins are even better as the core implementations of the same features. But this is an other discussion ;)

    By the way, at the last time I received many questions also by email, with your question. My answer is: This isn’t a Role Manager problem. Let me explain this a bit more:
    Your theme calls the function wp_list_pages to list all your pages. All pages? No, not all. Private pages for example are not listed in any case. Why? wp_list_pages calls get_pages to retrieve the pages from the database. The query used by get_pages looks only for published pages: WHERE (post_type = 'page' AND status = 'publish'). A private page has the value private for status and not publish.
    This is the reason, why your private pages are not listed. The Role Manager isn’t involved here.

    If you want go deeper in detail, you can find the function wp_list_pages in post-template.php at line 311 and get_pages in post.php at line 1875. The query-part is in line 1957. Both files are in wp-includes. An online version of the 2.5.1-versions with numbered lines are here.

  • Gravatar Yann Lossouarn meinte

    Ok… But… Am I the first to meet this problem ? Basically, I’d think that if I create a page with an account XXX, I could at least see this page when logged as XXX… And I thought your plugin would allow me to allow other users (with a given role level) to see my private pages as well. As (as far as I know) all wp themes do use wp_list_pages() to generate their main menu, do you mean that using the private pages (independently from the Role Manager plugin) always means modifying the theme in order to make private pages appear, even for people who own the rights to do so ? If so, do you have some clues about the way to solve this issue ?

    Thanks !
    Yann

  • Gravatar Yann Lossouarn meinte

    ^^ … just thinking about it : maybe I should not use the “private” criterion, but create a custom capability (something like “see Member-only pages” and set a “Member-only”=true/false” Custom Field on pages I want to hide ?

  • @Yann:
    Yes, that’s right. If you want use this feature you should modify your theme. Or use an extra plugin. Or code your own plugin. This is what I mean with my: Good old plugins implements feature better as the core doing the job.

    You can make a grep read_private_pages across the complete sources of WordPress - and you will find only some places for this capability. You can read also my earlier comment about implementations, checks and issues.

    The best way is creating a patch for both functions with an option to list also private pages if the user has the right capability and finally to open a trac ticket with this patch.

    In the moment the solution from your last comment is a good workaround.

  • hi,

    i have installed your plugin and it appears fine and allows me to click on individual roles and they go red/green.

    i do not want our contributors to see the pending drafts from other users. I have turned this off using your plugin but it still shows the pending drafts on the dashboard.

    you help please

    regards

    chris

    WordPress-Version : 2.5.1
    WordPress-Db-Version : 7796
    Role-Manager-Version : 02.02.02 (131586)
    PHP-Version : 5.2.5

    preg_replace : yes

  • Gravatar Zets meinte

    Dear Thomas. I have been visiting your page for a year now just to see what will happen with WPMU version of your plugin. But it seems that WPMU version will never see daylight. I think that it is a shame cause this plugin (which I really like) would have much more sense as a part of WPMU. I will contact you via e-mail because I have a few questions that I would like to ask you. Anyway, good luck with the further development of your plugin.

    Cheers

  • Gravatar Jason meinte

    Ok, I’ve noticed that when Users with roles less than an Administrator (and if allowed to Create/Edit/Delete users defined in Role Manager) are able to:

    - list all users (which is a bit insecure, as I would expect them to be able only to list users in levels up to their level, not above, like admins)

    - edit/delete all users (which is even more insecure, as this way they can simply “upgrade” any of the existing users to admins with no problem)

    - add new users with any roles assigned to them, even administrator role.

    Could that be fixed, so that users in group with a level of 7 can’t see any of the other groups above level 7, and can’t create new/edit existing users and assign them any role higher than 7, for example?

    Otherwise, this is a major security risk for anyone allowing any users in groups less than administrator to administer other users.

  • @Zets:
    I received your email and will answering in a few days, because I’m very busy in the moment.

    @Jason:
    Since WordPress 2.0 introduced Roles and Capabilities a ordering by levels doesn’t no longer exists. You can use levels but I hope no plugin or something else reacts on this levels.
    By the way, your problem is an “old” problem of the WordPress core implementation. You can find also on this page here some comments about this. But: This isn’t a Role Manager Problem.
    You can find many posts on the trac about your problem, e.g. this and this. The best for reading is this one with some more details.

  • Gravatar Zets meinte

    OK Thomas, thanks for your reply. I’ll be waiting.

  • Gravatar Miniz meinte

    I am trying to use role manager with “Fresh-post” plugin. When I uncheck “publish- post” on the role manager — it hides the entire custom write panel submenu. I need users to be able to write and edit posts through custom write panel– but submit it for approval . Problem is when I have “publish-post” option on ” users” can themself publish post — which I don’t want and when I uncheck “publish-post” all my submenu ( except WP default) disappear.

    Any Help ??

  • Gravatar drey meinte

    Hi! I am realizing the website for a online magazine and i have a big issue i hope i can solve with your plugin, although i am not sure how.
    The articles of the website are written by many people (20/30 and increasing) which we don’t want to have access to publish/edit functions in wordpress. What happens is that the writers send us the new articles by email, the owner of the magazine reads them/ modifies them and then publish them. BUT we want the writers to have wordpress profiles (ev. with biography etc) that can be called and shown with php in the post page and that they can use as well when they write comments.
    How can i make a role which is like a subscriber, but that the administrator, when writing a post, can select as author in the wordpress tab?
    (Hope i was clear enough :P )

    Drey

  • Gravatar RP meinte

    Is there a way to allow a user to view other users but not change other user roles

  • Hey Thomas, just believe me I was thinks that why wordpress made option for different level of users like Administrator, Editor, subscriber, author whereas there is no way to make it applicable, they are just as a display item………but from 1 website I came to know that you made a plugin which really helps us to make our dream world of roles. Thanks for this greast work.

    Keep it up so that we keep on getting along with new versions also
    :)

  • Gravatar Alex A meinte

    Hi Thomas. This plugin has been very useful. However I have two small questions:

    1. When I allow an author to moderate comments it doesn’t seem to be working, could this be a mac issue? or am I doing something wrong?

    2. How can I allow an user to edit other people’s posts, but only if their role is inferior. For example I want authors to be able to edit contributor’s posts but not the admin’s posts. Is that possible?

    Thanks for your help!

  • hi Thomas,
    could you help me?

    I have assigned somebody the role of ‘editor’. But the person is unable to edit posts and pages published by admin. I am sure that I have given the necessary permissions to do so. Am i missing something. I would appreciate an early response.

    Warm Regards and a good plugin :)

    Katya

  • Hi, I have been using the plugin for a while and had deleted some of the default roles, but I now need them back. How can I remove the plugin and restore all the default roles. disabling the plugin doesn’t restore the default roles. I will then reinstall the plugin and start again.

    WordPress-Version : 2.5.1
    WordPress-Db-Version : 7796
    Role-Manager-Version : 02.02.02 (131586)
    PHP-Version : 4.4.2-1build1

    preg_replace : yes

  • Gravatar Bryan meinte

    Looking to have a role that only allows for the moderation of comments. The role would be defined as “moderator”. Problem is, to allow the moderation of comments you must give that user the ability to edit posts (NOT what I want). What might the solution for this problem be? Any ideas?

  • Gravatar Rick meinte

    Hello..

    Awesome plugin.. How would I add a capability to Manage Pages.. I cannot get this without granting them access to Edit Pages, but then they have the ability to add pages to the site which I cannot have for it will alter the structure of the site.. I just want them to be able to edit the published pages that exist using the Manage link.. I tried adding a capability, but got nowhere with it because I could no figure out how to add limits to those capabilities..

    Any ideas would be awesome!!

    Thanks again..

  • Help! This plugin worked great for me when I was on 2.1, but ever since I upgraded to 2.5, I can’t seem to edit the capabilities of users. When I click on any green or red capabilities, they don’t change color or anything. It doesn’t work on IE or FireFox. I think there might be a javascript error somewhere? Is anyone else having this problem?

  • Using Firebug in FireFox, the problems seems to be a Javascript error:

    missing ; before statement
    createAJAX()tw-sack.js (line 43)
    sack(undefined)tw-sack.js (line 192)
    submitme(form#credentialed-lza__Login Redirect.cap_form users.php)users.php (line 79)
    onsubmit(submit )

    But I can’t seem to figure out what’s causing the error or how to get it fixed, and without it getting fixed, I can’t change any of the roles.

    Can someone help?
    Rex

  • Gravatar Karin meinte

    Hi, I translated the plugin into Spanish. If your send me your email address, I’ll send you the po and mo files. Have a great day and thanks for the plugin!!!

  • You mentioned in a response above, #63 you had a plug in that would allow users to “Edit published posts” and if you turn off “Moderate comments” they would be able to edit posts until commented on, but not edit comments. I would be interested in that plug in, could you please make it available? Your assistance would be appreciated.

    Regards,

    Mark

  • Hi Thomas,

    I just got around to upgrading to WP 2.5.1. I had some issues with 2.3.3 regarding roles and capabilities. You can see my previous comment above.

    My current question has to do with the ability of a non-Administrator to change their Role to an Administrator. Is there any way to prevent this while still giving them the ability to edit users on the same role-level or lower than their own?

    Thanks again for a great plugin!

    DaveE

  • Gravatar Rumores meinte

    Hi and again thanx a lot for your great job there Thomas : )

    Well, because my english is uncertain and this page’s hard to display with almost 420 comments (!), I don’t find a clue to help me on a specific point. The plugin works very fine everywhere else but I’m stuck with an users rights editing option…

    Can you please tell me if it’s possible to limit group’s capability to switch other users levels up to his own level only ?

    I mean, I’m the only one who have a “SuperAdmin” role for example, so I can manage all options, etc. but I would like that a “SimpleAdmin” role given to few users grants rights to manage less options and to be able to create new users, to manage their roles (”Contributor”, “Visitor”, …) but never be able to give an user a higher level than the “SimpleAdmin” one (always lower or equal than his own role) and by the way can not be able to downgrade mine for a lower one : )

    Thank’s in advance for your answer and sorry if my question have been threaten before,
    Rumores

  • Gravatar Rumores meinte

    Damn ^^
    In fact, same question than David Paul Ellenwood’s one above…
    I’m gonna wash my glasses right now, I sware !

  • Hi Thomas. You’ve done great work here, both with the plugin and with the support you’ve provided (423 comments!). I appreciate all the work you’ve done.

    I’m a teacher in Canada. We’re experimenting with using WordPress (2.5) to power our classroom blog. The problem is that low level users can see all comments, including unmoderated comments (and the associated email addresses).

    Can I try a copy of your plugin that is mentioned in comment 63 / 418?

    I’ve installed your “IWG Hide Dashboard” plugin which is great. I wonder if it’s possible to create an IWG Hide Comment plugin which disables the comments link when you log in.

    Regardless, thanks for the great plugin. Kisu.

  • Gravatar Frau Braun meinte

    Hallo, Thomas.

    Erstaml herzlichen Dank für das tolle Plugin. Ich habe ein kleines Problem:
    Unter den Admin-Berechtigungen taucht zweimal die Option “Login Redirect” auf (das brauche ich für ein anderes WP-Plugin): einmal zugelassen, einmal nicht zugelassen. Die nicht zugelassene Berechtigung lässt sich nicht umschalten. Unter Berechtigungen taucht “Login Redirect” als unbenutzte Berechtigung auf, lässt sich aber nicht löschen. Löschen und Neuinstallieren des Role Managers hilft auch nichts.

    Was kann ich wohl tun?

  • Gravatar Frau Braun meinte

    Dies hat geholfen:
    Rollen/Berechtigungen allgemein: Spaces allowed in Capabilities (Checkbox) If you have trouble with other plugins and Role Managers Capability Check. Save.

  • I’m trying to delete a user role created by FreshPost or CWP. I create a page using FreshPost, it then appears as a capability in Role Manager, f I delete the page it stays in the role manager capabilities list. Why don’t we have the option to delete a capability, or am I missing something.

    Thanks

  • I’m trying to delete a user capability created by FreshPost or CWP. I create a page using FreshPost, it then appears as a capability in Role Manager, f I delete the page it stays in the role manager capabilities list. Why don’t we have the option to delete a capability, or am I missing something.

    Thanks

  • I’m getting the following error on my blog:
    Warning: require_once(/home/content/…/lib/setup.php)

    Any idea what I can do to fix this?

    Never mind. It was conflicting with some old files from a previous install of a different program–I thought I’d deleted them all. Sorry for cluttering up your blog.

  • HELP HELP HELP!!

    Thomas, someone, can you please answer my question? This plugin is causing significant problems for me since I can’t seem to edit the capabilities!

    Here’s my previous comment:
    Help! This plugin worked great for me when I was on 2.1, but ever since I upgraded to 2.5, I can’t seem to edit the capabilities of users. When I click on any green or red capabilities, they don’t change color or anything. It doesn’t work on IE or FireFox. I think there might be a javascript error somewhere? Is anyone else having this problem?

    Is there anyone else experiencing this problem? How do I solve this issue? Help!

  • nice plugin! but where can i allow my authors to publish pictures in their posts?

    Greetings from Germany

  • Gravatar charled meinte

    Hello Thomas,

    Thanks for this great plug-in. I have somme questions and suggestions.

    1. Same as #425 & #1426 (Doc4). I’ve created a Custom Write panel with FreshPost. Then I deleted it. But it’s still in RM capabilities. How to delete it ?

    2. Could you add the capabilities to create page, create post instead of only edit. I’d like to let some users modify some posts or pages but not create some.

    3. another capability : to let choose which category a user can post in.

    4. Just for RM to be simpler to use, could it be possible to better sort capabilities like :
    - by action :
    - Create : Page, Post, Other page, Other post…
    - Edit : Pages, Post, Other page, Other post…

    - or by cat :
    - Page : create, edit, delete, create other, edit other, delete other…
    - Post : create, edit, delete, create other, edit other, delete other…

    Thanks again.

  • Gravatar jean meinte

    Just a little code for hide comment with the capability “hide_comment”


    Role Manager Plugin” for this Plugin.
    Author: Thomas Schneider / Jean
    Version: 1.0.0
    License: MIT License - http://www.opensource.org/licenses/mit-license.php
    */

    function iwg_hide_comment() {
    global $menu, $parent_file;

    if ( current_user_can(’hide_comment’) ) {
    unset($menu[20]);

    }
    }

    add_action(’admin_head’,'iwg_hide_comment’, 0);
    ?>

  • Gravatar Ploxcoke meinte

    Can you set a capability to limit which categories users can check?

  • Gravatar Simon meinte

    I am looking for a plugin that will allow me to add a user (or just an email address) on the post page and that person will be notified along with the site manager of new comments? Is this possible with your plugin?

    Thanks
    S

  • I am trying to limit my contributors from adding categories. It seems logical that your “Manage Categories” option would enable/disable that ability, but it does not seem to work that way. Using latest version of Wordpress. Thoughts?

  • I’ve been having a problem since WP 2.5.1 — I’m also using role manager 2.2.2.

    I have multiple authors contributing to one of my blogs. I want them to have to submit a post for review only so I can publish it on a schedule (ie. some authors will submit 4 or 5 posts at once at the beginning of each month). But I also want them to be able to modify their posts once they’re published. If they try doing this (since I set the options to allow it), the post it kicked back to “pending review” rather than just being saved with the changes.

    Anybody else having this issue? Any workarounds? I’m sure it has something to do with the latest WP code.

  • Gravatar SoWhat meinte

    How to use Custom Capabilities ?
    I would like to deny acces for Editors to use some sections of wp-ecommerce plugin.

  • Hi Thomas, I have updated the Farsi (Persian) language File. How can I send it to you?

  • Gravatar Oliver meinte

    Kann ich mit dem RoleManager Plugin bestimmte Plugins und deren BE Einstellungen für bestimmte Roles freischalten wenn “Edit Plugins” deaktiviert ist und wie erstelle ich die dazugehörige Capability?

  • it appears it’s not doing correct validation on capabilities. It won’t accept underscores such as audit_trail.

  • nice plugin here mate. Very useful

  • Hello:

    I just upgraded and so far so good. I had this problem in the last version so I thought I’d ask again.

    I’d like to be able to either limit viewable categories based on a user role. Or, allow certain roles to comment on private posts. Currently, anyone not an administrator can only view private posts w/no option to comment. Is there a way to add a capability to allow users to comment on private posts as well as viewing?

    I used to use Category Levels to manage this last option but it doesn’t function with 2.5.1 and the developer seems to have abandoned it.

  • Gravatar jorge meinte

    cooooooooooooooooooooooooooooooooooooooooool!!!!!!!!!!!!!!

  • Gravatar Paul meinte

    So, I’m wondering if it is possible to manage what non-logged in users can do. I want to force people to be logged in to my blog in order to even read the content. If their role (unauthenticated) doesn’t permit them, then they shouldn’t be able to even see the entries. Is that even possible?

  • Gravatar ppHal meinte

    I was looking at the trac on Codex and saw you had become owner of the ticket# 6014. When a role or user is given the ‘edit_users’ capability using your Role Manager plugin, they can change the roles of existing users to anything- even a role above their present user level. For example, an Author who has been given “edit-users’ by the plugin can promote himself to Admin.
    At the end of the ticket, there is a comment:
    “keywords changed from has-patch to has-patch capabilities”.
    First of all, I very much appreciate you taking on this issue- in addition to your excellent plugin.
    My questions is: where do we stand on this issue? Are you still waiting for reply from one of the core-developers?
    If it still not ready, how can I go about making these changes myself?
    Thanks very much

  • Gravatar Barbara Karnes meinte

    Role Manager is a Great tool! Thanks. Just one question… I only need two of the traditional Roles for my blog site; Subscriber and Administrator. I would like to remove the others and insert my custom Roles. If I do, will that negatively impact WordPress in some way - in other words, does WordPress