Permissions Settings Not Working

Permissions that are set to always off for a particular role, can be elevated by the user in preferences. This defeats the purpose of setting them to always off. Please let me know if this can be fixed.

Hi @Sheri17,

Thanks for reaching out.

Can you elaborate more about the issue you are facing? because I didn’t clearly understand what should be done.

Thank you.

When you go into settings and go to permissions. Under user preferences you can decide whether a each option for a particular user role is “always on” “always off” or “user preference” for a particular user role.

As the admin, when I set an option to “always off” for another user role, it doesn’t work. While logged in under a role that should be always off, I can go into preferences and change it.

Shouldn’t the admin being able to set it to always off mean the user can’t turn it on. Otherwise it might is well just be user preference for everything.

Can this be fixed?

Hey @Sheri17,

In the latest version of X/Pro theme, It has been available under “Settings” submenu of X.

You can always manage permission at Admin > X or Pro > Settings > Permissions. But that’s just allowing capabilities to a certain role, and it’s not where you assign the role to a user.
If you already have an existing role assigned to a specific user, then yes, you can go ahead allow cornerstone’s capabilities in that permission setting area.

Now, if what you’re referring is role management, then you’ll still need a plugin that will allow you to manage it, and you can edit each user at Admin > Users to assign that specific role.

Please have a look at the screenshot given below

Thanks

I think you’re misunderstanding me. I understand where and how to set permissions. I understand what they do. I’m saying it doesn’t work.

When I set turn something off for Editors, then I log in as a user who is an Editor I’m able to go into Preferences and turn it back on. That’s a problem.

Specifically I need “Advanced Mode” to be always off for some roles. It does no good for me to set it. If they can go into the preferences in Pro and turn it back on.

Hello @Sheri17,

The Permission Settings are limiting user roles from accessing the builders, which post type they can edit, theme options, and what elements you want them to have access with. You can also disable the User Preferences.

If you only allow the Editor to edit the page, post, and global blocks, he does not have access to the User Preferences:


Hope this helps.

Seriously guys I’ve been a developer and a sysadmin for a long time. I know how permissions work.

The only general setting enabled for an Editor is Pages

None of the User Preferences are are set to “User Preference” and the only one that isn’t always off is the Rich Text Editor.

When I log in as a user with who is an editor, I can access preferences.

…And I can change them.

At that point I have advanced mode access to the element configurations or anything else I want to change.

Am I missing something?

Hello @Sheri17,

I will forward this thread to our developers so that they can investigate your issues further.
Please bear with us.

Thanks.

Thanks, I appreciate it. Sorry about the initial confusion. I didn’t think about the difference between accessing preferences from the WordPress Dashboard and accessing them from within Pro itself.

Looking forward to your answer.

Hi @Sheri17,

You are most welcome. We will let you know once feedback comes from our development team.

Thanks

Checking in to see if there are any updates about this? Thanks!

Hey Sheri,

I see Alex has a note to look into this. He’s off for the holidays, but I know he’ll take a look when he gets back. Just wanted to let you know as it will be slightly longer than normal to get some visibility on this.

Thanks!

I’ll figure out a work around for now. I appreciate the update. Happy Holidays!

No problem, @Sheri17! Thank you for your understanding and we hope you have a happy holiday season as well! :slight_smile:

1 Like

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.