|
Devon Boorman
|
September 6, 2013 at 4:57 pm
Hello
I’m the online admin for a school using EE to create online course signups. There are a few Admins and a few Staff who will create events and process registrations. Using WordPress 3.5.2, EE 3.1.34.P, MER 1.0.4, Permissions 1.5.4.1, Recurring Events 1.1.7.1.
Trouble is that the question groups that a particular user makes is not visible in the event create/edit window by anyone but that user. Maybe just me, but I can’t imaging a setting where that would be useful–it certainly isn’t in my case. I want to be able to use everyone’s question groups and have everyone use mine. Ideally I would like “ownership” of questions and questions groups removed altogether to eliminate this problem (or toggle it in the prefs, anyway).
Of course I can deactivate Permissions plugin and make everyone an Administrator, but that is just not a good idea at all.
How can all of the EE admins have access to all of the question groups created? Thanks in advance for your help.
|
|
Josh
|
September 9, 2013 at 10:34 am
Hi Devon,
This isn’t possible with using the Roles and Permissions add-on. It simply does not have a global question groups feature.
You may want to look into using the Advanced Access Manager plugin to configure/lock down areas of the admin for the user accounts that you do not want to give full admin access to.
|
|
Devon Boorman
|
September 9, 2013 at 2:23 pm
I’ve tried to use Advanced Access Manager. I prefer User Roles Editor, which does the same thing. Problem is that even if I give Editor-level users “espresso_event_admin” and “espresso_event_manager” (and every other) capability they still can’t access EE–no EE in the admin menu. It seems like EE can only be used under two circumstances:
1. Roles & Permissions deactivated, full “Administrator” capabilities. Not even a renamed clone of the “Administrator” will do. Problem: any EE staff must be a full Administrator (security problem).
2. Roles & Permissions activated. User capability must be named “Espresso Master Admin” (can’t access group questions), or “Administrator” (too much core access, still can’t access group questions).
I don’t need to “hide” any part of EE from anybody. But I do need to hide core WordPress software and system functions from non-admins. It seems to me like EE is not looking at the individual capabilities themselves (espresso_event_admin, and the like), but only at the title of the user (Administrator, Event Espresso Admin). But using the Event Espresso Admin title only works if R&P is activated, which wrecks groups questions.
Thanks for your help.
|
|
Sidney Harrell
|
September 9, 2013 at 8:41 pm
You should also have EE roles Espresso Master Admin, Espresso Event Manager, and Espresso Regional Manager. You should be able to edit one of those roles and give it the same non-EE WP capabilities of the Editor role.
|
|
Devon Boorman
|
September 10, 2013 at 2:18 am
hi Sidney
Thanks for your reply. You and Josh have been very prompt to answer my questions.
The trouble is that EE does not work with the roles “Espresso Master Admin”, “Espresso Event Manager”, and “Espresso Regional Manager” unless the Permissions plugin is active, which wrecks question groups.
Believe me, I’ve tried giving Espresso Master Admin every permission possible, but the EE menu will not appear for that user unless the Permissions plugin is active, or the user is set to “Administrator”.
Thanks.
|
|
Josh
|
September 10, 2013 at 11:20 am
Hi Devon,
I think the solution you are looking for lies outside of the Roles and Permissions add-on since Roles and Permissions groups the questions on a per user basis.
I don’t need to “hide” any part of EE from anybody. But I do need to hide core WordPress software and system functions from non-admins.
What some have done to work around this is set up an admin account non-admins, but use Advanced Access Manager’s remove capabilibilities per *account* feature to remove admin capabilities from the accounts you need to lock down. I’m not familiar with the User Roles Editor plugin to know whether that one has a similar feature, but if it does it could be used much the same way.
|
|
Devon Boorman
|
September 16, 2013 at 3:06 pm
Right. So, the solution is both simple and complicated. One thing that Advanced Access Manager (AAM) does that User Roles Editor does not do, is edit Administrator capabilities (URE can edit all but Administrator). One thing that URE does is show additional roles. Both plugins are needed to accomplish the goal set here.
I’ve made my EE admins into Administrators and have edited their capabilities appropriately (to match those of an Editor) with AAM. One trick with AAM is that it makes a new role called Super User. And this additional role is hidden, and only this additional role can access AAM settings. Thankfully URE can show those hidden roles, and I had to deactivate and reactivate the roles a few times in different orders so that after my Administrator primary role, 2) Super Admin and 3) Event Espresso Admin showed up in exactly that order. Any other order would cause permission problems.
It seems like EE adds the additional role of Event Espresso Admin to the Administrator role. And only under this config can a user access the EE plugin. In the future perhaps there can be a more flexible way of allowing an individual user (or role) the ability to access the EE plugin.
Thank you very much for your help in this. Unless you have any additional questions for me, consider this issue solved. Keep up the good work!
Greg Reimer (Duello web guy)
Vancouver, BC, Canada
|
