User Exceptions disappear

  • Resolved viedu

    (@viedu)


    8 years, 11 months ago

    We’re using PP (Core, plus several of the additional plugins). We were informed about a week ago that some users are able to see pages and posts they’re not supposed to. Further investigation showed that approx 5% of our approx. 9,000 users had their list of Exceptions wiped out. Interestingly, we were experimenting with one user account and tried changing the users role from “User” to “Test User”, then back to “User”. That user then had all the Exceptions associated by default with that role. Really weird, though, was it fixed the issue for *all* of the affected users.

    The issue re-surfaces about once or twice per day, and we haven’t been able to discern a pattern. The only thing we can tell for sure is it seems to be the same users who are affected each time.

    This one is a real head scratcher.

    Any idea where to look, what to try, what to check?

Viewing 11 replies - 1 through 11 (of 11 total)
  • Plugin Author Kevin Behrens

    (@kevinb)

    8 years, 11 months ago

    The development version 2.3.20-dev should prevent that error.

    https://downloads.wp.xz.cn/plugin/press-permit-core.zip

    FYI, best practice is to start with a limited user and expand access using PP-assigned roles and exceptions. Then if the PP adjustments stop being applied (due to deactivation, plugin conflict or whatever), your default failure condition is too little access.

    Thread Starter viedu

    (@viedu)

    8 years, 11 months ago

    Thanks for the response. We finally updated with 2.3.20-dev…but the issue is still happening.

    Plugin Author Kevin Behrens

    (@kevinb)

    8 years, 11 months ago

    [removed comment]

    • This reply was modified 8 years, 11 months ago by Kevin Behrens.
    Thread Starter viedu

    (@viedu)

    8 years, 11 months ago

    Ok…but we fix (at least temporarily) affected users by changing their role to something else, then changing it back to their actual role…they then get the exceptions for that role. But then they disappear again eventually.

    So, if the code change will keep that from happening to *other* users, great. But for the 400 or so that this keeps happening to, do you have a recommendation how to fix them so they “stick”?

    Plugin Author Kevin Behrens

    (@kevinb)

    8 years, 11 months ago

    Your site’s behavior is very strange. Do you have any other permissions-related plugins active?

    Plugin Author Kevin Behrens

    (@kevinb)

    8 years, 11 months ago

    What did you use to create the Test User role?

    Plugin Author Kevin Behrens

    (@kevinb)

    8 years, 11 months ago

    Actually, if you are a Pro user, please use that forum instead.

    Plugin Author Kevin Behrens

    (@kevinb)

    8 years, 11 months ago

    So, if the code change will keep that from happening to *other* users, great. But for the 400 or so that this keeps happening to, do you have a recommendation how to fix them so they “stick”?

    I removed my previous comment. The change is intended to make all existing users function correctly.

    Thread Starter viedu

    (@viedu)

    8 years, 11 months ago

    I just noticed our Pro license expired 6/20. Not sure if that’s related, but I’ll get that renewed ASAP.

    This site was created by a 3rd party company who no longer exists. I just looked at the plugins, and the only other one that is possibly permissions related is “User Role Editor”. No new plugins have been installed for a while, though, and this issue just recently started (or, at least, we only recently noticed it…)

    Plugin Author Kevin Behrens

    (@kevinb)

    8 years, 11 months ago

    Expiration does not impose any changes in plugin functionality. It will be good to engage with you on the pro support forum, though.

    Plugin Author Kevin Behrens

    (@kevinb)

    8 years, 9 months ago

    For the record, version 2.3.21 included a partial fix for this issue to correct access for affected users. The newly updated development version (2.3.22-dev) has a further change to address the root issue: auto-deletion of role metagroups when the custom or 3rd party code which registers a custom role is temporarily deactivated.

Viewing 11 replies - 1 through 11 (of 11 total)

The topic ‘User Exceptions disappear’ is closed to new replies.