• Hello! I made a post about this same issue about a year ago, I’m not sure why this ability dissapeared again. The issue is that me, the admin, am the only user role that can create or select a location when adding an event. When other user roles try to add or select a location for their event, it says ‘You do not have permission to perform this action.’ This is highly important! A plugin update was made and it fixed this issue. Can this same thing happen here? Here is the thread from a year ago about it:

    https://ww.wp.xz.cn/support/topic/cannot-add-an-event-location/

    • This topic was modified 2 days, 7 hours ago by lrkosko.
Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support ArtemSupport

    (@artemsupport)

    Hello,

    By default none of other roles can access EventON Settings or Events. Could you let us know more about the user role you tried to use and also which plugin do you use to create/manage it?

    Are you still using Publishpress?

    Thread Starter lrkosko

    (@lrkosko)

    So I created custom user roles in PublishPress, it is most like an editor role. It seems silly that just now, only the admin can add a location to a new event, this has always been possible in the past! What changed? Me, the admin, is not the person entering in our events, I work for a fairly large company and another person is the one doing these tasks across multiple websites. Can this be fixed like it was a year ago?

    Plugin Support ArtemSupport

    (@artemsupport)

    Thank you for your messages!

    I am going to escalate this ticket to development to help in here. Please allow us some time to address this, and we truly appreciate your patience. Thank you for being a valued EventON customer!

    Plugin Author Ashan Perera

    (@ashanjay)

    We had added additional permission checks based on user role, beceuase someone reported a vulnerability that any user can create locations and edit them. Here is where the code that checks user permissions. You can comment that out for the moment and get this working on your side.

    Because of the reported vulnerability without this permission check, we will need to add other settings that remove it with user’s choice. We might be able to get this implemented in the next version release.

    File: EventON/includes/admin/class-admin-taxonomies_editor.php

    line: 135

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.