Groups access control doesn’t work for all users
-
Hello,
I’m having an issue with Woocommerce shortcodes when activating the Groups plugin.
I’ve installed WordPress 4.8.1 (default 2017 theme) and Woocommerce 3.1.1, and created:
10 products that should be public (no restriction at all).
10 that should be visible to group A.
10 that should be visible to group B.
10 that should be visible to groups A and B.After installing and activating Groups 2.3.0, i’ve:
* Created ‘Group A’ and ‘Group B’.
* Created 2 new users, and assigned one to ‘Group A’ and the other to ‘Group B’.
* Set access restrictions on the products as described above.What happens:
On the Woocommerce ‘Shop’ page the products are displayed properly:
– 10 products when logged out.
– 30 products when logged in, with each user seeing the products matching their assigned group.On a page that displays all products, using the shortcode – [products ids=”1, 2, 3, 4, 5 …”] (listing all products in the store), i’m seeing 30 products correctly when logged in as a user of group A, but only 20 when logged in as a user of group B.
I’ve verified that all products and users are set-up correctly, and while this is happening, the ‘Shop’ page shows the correct number of products – 30 (for each user).This is also having an effect on the Elegant Themes – Divi Theme i’m trying to install with the shop, which relies on shortcodes, and as a result doesn’t display products correctly in it’s front page ‘Shop’ module. It isn’t showing products that the user should have access to, based on their group.
WC shortcodes list:
https://docs.woocommerce.com/document/woocommerce-shortcodes/
I’ve also tried to use other shortcodes from the list, with similar results.Any help would be greatly appreciated, as i’ve tried to reinstall / deactivate / wipe everything a few times, with no success so far.
Thank you.
-
I’ve tried a few variations on your all-products page, and got odd results .. I think now I know why.
I’ve taken a look at how this
[products]shortcode is implemented, it uses transients to store results for a particular shortcode instance based on some parameters, among them the product IDs that have been passed to the shortcode. If you have a look at your all-products page and check the results it produces for the shortcode where only IDs of unrestricted products are included – under “Products not assigned to groups” and “Products not assigned to groups, using a different order” – it will show all products the user is allowed to view, even if their IDs are not passed to the shortcode. I think the shortcode is accessing the same transient although the parameters are different. To me this is a bug in the shortcode and I wouldn’t use it.A possible solution if you still want to use it, group the products like I’ve done on your page. Imagine products 123 and 234 belong to one group while products 345 and 456 belong to another group. As you can see on your all-products page, this seems to work:
[products id="123,234"] [products id="345,456"]You could display some additional info conditionally using
[groups_member]:[groups_member group="Students"]Hey Students, here are your products: [products id="123,234"][/groups_member] [groups_member group="Alumni"]Dear Alumni, we have these fine products exclusively for you: [products id="345,456"][/groups_member]I hope that this helps you, I’ll mark this as resolved with the above solution (although I still would rather recommend to look for other ways instead of using that shortcode).
Please feel free to ask if you need further help.
The topic ‘Groups access control doesn’t work for all users’ is closed to new replies.
