[RadModerator]

Cool! Let us know how it goes 🙂

[T RParticipant]

And he did it. Great job! Here’s the new code for that in case others can use this solution:

<?php

/*
* Appearance permissions: edit Appearance menu for selected roles
* Author: Vladimir Garagulya
* email: support@role-editor.com
*
*/

class AppearancePermissions {

// roles to which allow the Appearance menu
private $allowed_roles = array(‘editor’);
// allowed items from Appearance menu
private $allowed_items = array(
‘widgets.php’,
‘nav-menus.php’
);
// capabilities required by WordPress to access to the menu items above
private $required_capabilities = array(
‘edit_theme_options’
);

private $prohibited_items = array();

public function __construct() {

add_filter(‘user_has_cap’, array($this, ‘add_required_caps’), 10, 4);
add_action(‘admin_head’, array($this, ‘remove_appearance_menu_items’), 10);
add_action(‘admin_head’, array($this, ‘appearance_redirect’), 10);
add_action(‘wp_head’, array($this, ‘hide_admin_bar’));
}

protected function user_has_allowed_role($user) {
foreach($user->roles as $role) {
if (in_array($role, $this->allowed_roles)) {
return true;
}
}

return false;
}
// end of user_has_allowed_role()

public function add_required_caps($allcaps, $caps, $args, $user) {
if (!$this->user_has_allowed_role($user)) {
return $allcaps;
}

remove_filter(‘user_has_cap’, array($this, ‘add_required_caps’), 10, 4);
foreach($this->required_capabilities as $cap) {
if (!$user->has_cap($cap)) {
$allcaps[$cap] = true;
}
}
add_filter(‘user_has_cap’, array($this, ‘add_required_caps’), 10, 4);

return $allcaps;
}
// end of add_required_capabilities()

/**
* Hide admin front-end menu
*/
public function hide_admin_bar() {
global $current_user;
if ($this->user_has_allowed_role($current_user)) {
// block front end admin menu bar
show_admin_bar(false);
}
}
// end of hide_admin_bar()

public function remove_appearance_menu_items() {
global $current_user, $menu, $submenu;

if (!$this->user_has_allowed_role($current_user)) {
return;
}

if (!isset($submenu[‘themes.php’])) {
return;
}
// remove not allowed menu items under Appearance menu
foreach($submenu[‘themes.php’] as $key=>$item) {
if (!in_array($item[2], $this->allowed_items)) {
$this->prohibited_items[] = $item[2];
unset($submenu[‘themes.php’][$key]);
}
}

// remove all other menu items which could become available after adding capabilities to the role
foreach($menu as $key=>$item) {
if ($item[2]==’themes.php’) { // skip ‘Appearance’ menu item
continue;
}
if (in_array($item[1], $this->required_capabilities)) {
$this->prohibited_items[] = $item[2];
unset($menu[$key]);
}
}

foreach($submenu as $sub_key=>$subitem) {
if ($sub_key==’themes.php’) { // Skip themes submenu
continue;
}
foreach($subitem as $key=>$item) {
if (in_array($item[1], $this->required_capabilities)) {
$this->prohibited_items[] = $item[2];
unset($submenu[$sub_key][$key]);
}
}
if (count($subitem)==0) {
unset($submenu[$subkey]);
}
}

}
// end of remove_appearance_menu_items()

public function appearance_redirect() {
global $current_user;

if (!$this->user_has_allowed_role($current_user)) {
return;
}

foreach ($this->prohibited_items as $item) {
$result = stripos($_SERVER[‘REQUEST_URI’], $item);
if ($result !== false) {
wp_redirect(get_option(‘siteurl’) . ‘/wp-admin/index.php’);
}
break;
}
}
// end of appearance_redirect()

}
// end of class AppearancePermissions()

new AppearancePermissions();

[Rich AParticipant]

Awesome TR! So to clarify, this script allows you to set the WP user role (permissions) on a specific user role in the User Role Editor plugin to prevent the user from accessing/editing anything in the “Customizer” setting except widgets and menus correct?

If so…that’s terrific!

Did you modify one of the existing roles or did you create a specific user role in the plugin?

Final dumb question…are you placing this script inside an existing PHP file within the User Role Editor Plugin files and if so which one exactly? If not is it a stand-alone and if that’s the case, where are you placing the file and how is it called?

Thanks for your tenacity, it’s truly appreciated!

[RadModerator]

Cool! Thanks for sharing T R 🙂

[T RParticipant]

Sure! You’re all welcome. Sorry for the delayed response.

Yes, Rich. You are correct. This allows the user role to be activated and not see the customizer at all. only the widgets and menus. Yes!

I set this up for the ‘editor’ role. I didn’t create a new role at all.

You add this script to a file called appearance-permissions.php and place it in a folder called mu-plugins under wp-content folder. Once that’s done, that’s it! The script takes care of the rest.

If you try this out, let me know if you have a problem with it. I will subscribe to this thread to be sure to get notification when a response is added. Again, I’m sorry for such a late response.

[RadModerator]

No problem T R, Thanks again! Thumbs up 😉

[Author]

Posts