Hi,
I am using Press Permit Pro. I have a slight issue which if resolved could decide the choice of event plugin we go for.
I have a ‘user’ of ‘subscriber role’ type. This user has just ‘EDIT’ events rights as per the default permissions. This should only allow them to edit their own ‘events’ right ?????
When using Press Permit Pro and following the guide to restrict visibility of events by a custom privacy status
https://www.youtube.com/watch?v=d_5r8NKjxDQ
They can then see “public events” and then edit them which is not correct/expected I think. I need to fix this. I do not want them to be able to edit ‘public events’ they don’t own.
Is the problem the Press Permit Pro code ?
Thanks
Robin
Robin Cotgrove
Hi Robin,
Yes, to be able to edit other user’s events they would need the “Edit Others’ Events” permission.
From just looking at that youtube video, I suspect what is happening is that Press Permit Pro doesn’t have any option to allow users to edit only their own posts (or events in this case), and hence they can edit all or nothing.
That said, because of the way WordPress handles permissions I suspect it is perhaps a bug/oversight on behalf of PPP.
The way capabilities work in WordPress, (and I probably explain it better here), is that given a challenge (“Can this user edit this post?”), WordPress response with a list of requirements “primary permissions” they must have (e.g. they must be able to edit posts, they must be the owner of that post).
I suspect that PPP is either removing some of those requirements or adding the capability to edit others’ posts (if it’s the latter then you should see this reflect in Event Organisers’ Settings > Permission tab). In either case, it should be possible to add some code to modify PPP’s behaviour – but this is all based on guesswork thus far ;).
I’d recommend you get in touch with PPP to check if what you’re seeing is intended behaviour.
Stephen Harris