Role Scoper Learns to Cooperate with Page Categories

Recent changes to the inner working of Role Scoper’s Hidden Content Teaser proved to clash with the Page Category Plus plugin. Anyone using this plugin in conjunction with Role Scoper should upgrade to Role Scoper 0.9.26 as soon as possible to avoid exposure of restricted or private content. At the very least, Page Category Plus users should disable Role Scoper’s Hidden Content Teaser until you are able to perform this upgrade.

For those not categorising pages, this is an optional update. There are a few minor fixes noted in the change log below. If these do not concern you, a reasonable option is to stick with the previous version, or revert to it if problems arise with 0.9.26.

Change log for Role Scoper 0.9.26:

Page Categories (Page Category Plus plugin + Categorized Pages + Role Scoper “Section Roles for Pages” realm setting):

  • fixed: Using Page Categories with Teaser disabled for posts and pages, pages in an Exclusive Readers category were exposed in the posts listing
  • fixed: Using Page Categories with Teaser disabled for posts and pages, visible pages did not force their category into the categories list
  • fixed: Using Page Categories With Teaser enabled for posts or pages, various inappropriate exposure of private / exclusive pages and posts
  • fixed: Using Page Categories, false teaser displayed for some posts/pages (though direct access granted)
  • fixed: Using Page Categories, false teaser displayed to Administrator
  • fixed: Using Page Categories, Pages were not correctly accounted in category count
  • fixed: Using Page Categories, when Manage Posts list is filtered by Category, Category Roles and Object Roles columns became invalid for mixed results of Posts and Pages

Admin – General:

  • fixed: In Post/Page role assignement users list, indication of implicitly owned roles did not correctly account for Exclusive Sections settings
  • fixed: 404 message instead of Teaser for direct access attempt to private Post/Page
  • change: Different approach to forcing inclusion of private posts/pages for qualified users or teasing, eliminates risk of content exposure to unqualified users due to unexpected configuration such as occurred with Page Category Plus.
  • change: In the Role tabs of Post/Page Edit form, captions next to “Exclusive” checkbox are more descriptive
  • change: In the Readers tab of Post/Page Edit form, caption cites “Readers” role (was “Private Page Readers”)