|
esteban soto
|
June 23, 2013 at 3:09 am
There is a problem. Everybody who is a user including “subscribers” can see all the events in the app and check in every atendee from every event.
|
|
Josh
|
June 24, 2013 at 11:49 am
Hi Esteban,
It sounds like you’re using the older espresso services API. You can add a check for the admin role before the API displays older events by adding the following after line 50 of the espresso-services/events.php file:
//Get the role for this user
$caps = get_user_meta($userid, 'wp_capabilities', true);
$roles = array_keys((array)$caps);
//Set this to whatever role is needed to scan tickets
if ($roles[0] == 'administrator'){
//Continue
}else{
die("<?xml version='1.0'?><events><error>4</error><desc>Invalid User Role</desc></events>");
}
|
