| User | Post |
|
8:04 am December 16, 2008
| metal450
Member
| | | |
|
| posts 178 |
|
|
Hi Kevin,
I just tried installing your plugin from scratch, and simply enabling it with the default settings iis causing ALL of my posts to become unavailable (to all users & roles, including Administrator). No posts appear in the main listing, and no posts can be accessed directly via the post's permalink. However, when I edit the posts, it does show my admin username in green parentheses (thus it seems like the post should be visible). I spent a bit of time going through all the options as well as this forum and can't seem to figure out what's wrong.
Note that none of my roles are the Wordpress default roles…but I wouldn't think this would matter, as none of them have been explicitly restricted (yet) in your plugin.
The other plugins I'm running are: Add From Server 1.4 Advanced Excerpt 0.1.2 Akismet 2.2.3 Bad Behavior 2.0.25 Cookie Timeout 0.5 Disclose-Secret 2.4 (DEACTIVATED FOR THIS TEST, AS I'm TRYING TO REPLACE IT WITH ROLE SCOPER) FeedBurner FeedSmith 2.3 Feed Styler 1.07 FireStats 1.5.12-stable Get Recent Comments 2.0.2 Google XML Sitemaps 3.1.0.1 Login Logger 1.1 Maintenance Mode 3.2 Ozh's IP To Nation 1.2.1.1 Register Plus 3.5.1 Role Manager 2.2.2 Subscribe To Comments 2.1.2 View Counter 1.02 WP-UserOnline 2.31
Thanks for any help…
|
|
|
3:22 pm December 16, 2008
| Kevin
Admin
| | | |
|
| posts 2503 |
|
|
I sent you a development version to try, just to make sure we're on the same page.
If you still get the same results, it's probably because one of the other plugins has defined the pluggable functions set_current_user or wp_set_current_user. Role Scoper cannot function securely unless it gets to define those functions.
|
|
|
3:23 pm December 16, 2008
| Kevin
Admin
| | | |
|
| posts 2503 |
|
|
another way this can happen is if another plugin forces early execution of pluggable.php
|
|
|
3:44 pm December 16, 2008
| YikYak
Member
| | | |
|
| posts 70 |
|
|
Maintenance Mode 3.2 did that to me, I just got a "post not found" message as per my theme, I did make a post about it a while ago and Kevin found a workaround (but I stopped using Maintenance Mode). Did you get Kevin's fix for that? Have a search in these Forums if you didn't see it.
|
|
|
8:02 pm December 16, 2008
| metal450
Member
| | | |
|
| posts 178 |
|
|
That's it! I tried disabling every single plugin EXCEPT Maintenence mode…of course…but killing that one seems to have solved the problem.
Now to figure out how to lockout my blog while I perform the rollover to role scoper :/
|
|
|
8:28 pm December 16, 2008
| Kevin
Admin
| | | |
|
| posts 2503 |
|
|
You could temporarily put an “all except my IP” RewriteRule in your .htaccess
That would be better than Maintenance Mode, because you could still test the site as non-admin or even anonymous.
|
|
|
8:59 pm December 16, 2008
| metal450
Member
| | | |
|
| posts 178 |
|
|
True…except that I'm traveling pretty much full-time, and therefore constantly accessing from different IP's…so it's pretty convenient being able to just switch it on-and-off as I go
|
|
|
1:13 pm December 17, 2008
| YikYak
Member
| | | |
|
| posts 70 |
|
|
Lock Out (by Skullbit) seems to do the job up to WP2.7, leaves the blog open fully to admins, and the back end of the blog open to registered users, but shuts the front, if that's what you want?
|
|
|
6:58 pm December 17, 2008
| metal450
Member
| | | |
|
| posts 178 |
|
|
Awesome, that could be just what I'm looking for!
One more question: Am I wrong, or are restricted pages becoming visible when Role Scoper is disabled? It seems like hidden posts should remain hidden for security purposes…or is there a setting somewhere I need to enable for this?
Thanks!
|
|
|
9:40 am December 18, 2008
| Kevin
Admin
| | | |
|
| posts 2503 |
|
|
See my explanation on "why doesn't Role Scoper auto-set private status" here.
|
|