PLEASE NOTE: These forums are no longer utilized and are provided as an archive for informational purposes only. All support issues will be handled via email using our support ticket system. For more detailed information on this change, please see this blog post.

user without gform_full_access can still edit Mailchimp, User Registration

Gravity Support Forums » Plugin Support » Gravity Forms

  1. jameztcc
    Member

    Hi,

    I just created a custom role similar to Editor , +gravityforms_view_entries . This role does not have gform_full_access to it BUT it still can edit and update Mailchimp and User Reg settings which are undesirable.

    Is there a workaround if I assume the permissions does not work on addons?

    thanks,
    James Tan

    Posted 12 years ago on Friday September 16, 2011 | Permalink

  2. Carl Hancock
    Administrator

    The Add-Ons have their own capabilities. All of the capabilities are listed here:

    http://www.gravityhelp.com/documentation/page/Role_Management

    You need to make sure those capabilities aren't granted to the Role you are editing.

    The best way to handle role management is to install the Members plugin and use it's role management capabilities. Don't let it's name full you, it's not a full membership plugin... but it does have great role management capabilities:

    http://wordpress.org/extend/plugins/members/

    Posted 12 years ago on Friday September 16, 2011 | Permalink

  3. jameztcc
    Member

    Hi Carl,

    thanks for that role management list.

    I saw "MailChimp
    gravityforms_mailchimp
    gravityforms_mailchimp_uninstall" and in my current capabilities of role with these disabled/unchecked e.g. "modifiedEditor", the user can still modify the setup of Mailchimp ie wp-admin/admin.php?page=gf_mailchimp . Is there anyway we can prevent people from editing settings of addons?

    thanks,
    James Tan

    Posted 12 years ago on Saturday September 17, 2011 | Permalink