Hello,

I would very much like to understand how to integrate role scoper with Active Directory on my Wordpress MU install.

Our install of MU currently has around 40-50 blogs, some staff, some public. At present, we are simply not allowing public sign-up, and restricting registration to users with organisational email accounts. This is not great.

Where we want to be is in a position where we can have public blogs that allow public sign-up, staff blogs for general staff use, and departmental private blogs within the staff domain. All staff accounts need to authenticate against Active Directory (AD) as they do currently thorugh the WPdirauth plugin. We have roles defined in AD already which we would like to map to roles in Wordpress.

Am I on the right tracks asking this here? I would love to understand this completely.

Jim

In your blog admin, navigate to Roles > Options. In the "Content Maintenance" section, set the option "Roles and Restrictions can be set" to "by blog-wide Editors and Administrators" or "by Administrators only". Click the Update button. How does Role Scoper compare to Role Manager or Capability Manager? Role Scopers functionality is entirely different and complementary to RM and CM. RM/CM do little more than alter WordPress definition of the capabilities included in each role. Thats a valuable task, and in many cases will be all the role customization you need. Since RM/CM modifications are stored in the main WordPress database, they remain even if RM/CM is deactivated. Role Scoper is useful when you want to customize access to specific content, not just blog-wide. It will work with the WP roles as a starting point, whether customized by RM/CM or not. To see how Role Scopers role definitions correlate to your WordPress roles, navigate to Roles > Options > RS Role Definitions in your blog admin. Role Scopers modifications remain only while it stays active. Why are there so many options? Do I really need Role Scoper? It depends on what youre trying to accomplish with your WordPress installation. Role Scoper is designed to be functionally comprehensive and flexible. Great pains were taken to maintain performance and user-friendliness. Yet there are simpler permission plugins out there, particularly if you only care about read access. Review Role Scopers feature list and decide whats important to you. Why doesnt Role Scoper limit direct access to files that Ive uploaded via FTP? Role Scoper only filters files in the WP uploads folder (or a subfolder). The uploads folder must be a branch of the WordPress directory tree. The files must be formally attached to a post / page via the WordPress uploader or via the RS Attachments Utility. In your blog admin, navigate to Roles > Options > Features > Attachments > Attachments Utility. Where does Role Scoper store its settings? How can I completely remove it from my database? Role Scoper creates and uses the following tables: groups_rs, user2group_rs, role_scope_rs, user2role2object_rs. All RS-specific options stored to the WordPress options table have an option name prefixed with "scoper_". Due to the potential damage incurred by accidental deletion, no automatic removal is currently available. You can use a SQL editing tool such as phpMyAdmin to drop the tables and delete the scoper options.