PluginProbe
User Access Manager / 1.2.14
User Access Manager v1.2.14
2.3.20 2.3.19 2.3.18 2.3.17 2.3.16 2.3.15 2.3.14 2.3.13 trunk 0.6 0.6.1 0.6.2 0.7 0.7 Beta 0.7.0.1 0.8 0.8.0.1 0.8.0.2 0.9 0.9.1 0.9.1.1 0.9.1.2 0.9.1.3 0.9.1.4 1.0 All 136 releases
← All changes | readme.txt +66 -284 2.3.17 → 1.2.14 View file →
@@ -1,40 +1,34 @@
1 1 === User Access Manager ===
2 2 Contributors: GM_Alex
3 3 Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=1947052
4 -Tags: member access, user access manager, user management, access
5 -Requires at least: 4.7
6 -Requires PHP: 8.0
7 -Tested up to: 7.0
8 -Stable tag: 2.3.17
9 -License: GPLv2 or later
10 -License URI: https://www.gnu.org/licenses/gpl-2.0.html
4 +Tags: admin, access, member area, members, member, member access, page, pages, post, posts, private, privacy, restrict, user, user access manager, user management
5 +Requires at least: 3.4.0
6 +Tested up to: 4.7.0
7 +Stable tag: 1.2.14
11 8
12 9 With the "User Access Manager"-plugin you can manage the access to your posts, pages and files.
13 10
14 11 == Description ==
15 12
16 -The “User Access Manager”-plugin for WordPress allows you to manage the access of your content. This is useful if you need a member area, a private section at your blog, or you want that other people can write at your blog but not everywhere. Including all post type (post, pages etc.), taxonomies (categories etc.) and files by creating user groups. Just assign the content you want to restrict und and your registered users which should have access to a group. From now on the content is only accessible and writable for the specified group.
13 +With the "User Access Manager"-plugin you can manage the access to your posts, pages and files. You only create a user group, put registered users to this and set up the rights for this group. From now on the post/page is only accessible and writable for the specified group. This plugin is useful if you need a member area or a private section at your blog or you want that other people can write at your blog but not everywhere.
17 14
18 -<em>Try it out</em>
15 +Appeal: If it works click the "Works" button, if it don't works click the "Broken" button and write me. That is the only way to find bugs and see if the plugin works proper. Thanks.
19 16
20 -You can try it out at TasteWP.com before install: [Try user access manager](https://demo.tastewp.com/user-access-manager?a=jlQ7F1va) (affiliate link)
21 -
22 17 <em>Feature list</em>
23 18
24 19 * User groups
25 20 * Set separate access for readers and editors
26 21 * Set access by user groups
27 -* Set default user groups
28 -* Set time based access
29 -* User-defined post type (posts, pages etc.) title (if no access)
30 -* User-defined post type (posts, pages etc.) text (if no access)
22 +* Set access by post categories
23 +* User-defined post/page title (if no access)
24 +* User-defined post/page text (if no access)
31 25 * Optional login form (if no access)
32 26 * User-defined comment text (if no access)
33 -* Hide complete post types (posts, pages etc.)
34 -* Hide elements in the navigation
27 +* Hide complete post/page
28 +* Hide pages in navigation
35 29 * Redirecting users to other pages (if no access)
36 -* Recursive locking of content
30 +* Recursive locking of posts/pages
37 31 * Limited access to uploaded files
38 32 * Full integrated at the admin panel
39 33 * Multilingual support
40 34 * Also protect your rss feeds
@@ -39,23 +33,33 @@
39 33 * Multilingual support
40 34 * Also protect your rss feeds
41 35 * Give access by IP-address
42 36 * Plugin-Api to use the User Access Manager in your on plugins or extend other plugins
43 -* [UAMPPE](https://wordpress.org/plugins/user-access-manager-private-public-extension/) like behaviour is now build in (Expect negation like !groupName and showprivate and shownotauthorized parameter)
44 37
45 38 <em>Included languages</em>
46 39
47 -See [https://translate.wordpress.org/projects/wp-plugins/user-access-manager](https://translate.wordpress.org/projects/wp-plugins/user-access-manager)
40 +* Czech, based on 1.1.1.2. Thanks to Jan
41 +* Danish, based on 1.1.1.2. Thanks to GeorgWP
42 +* English
43 +* Farsi, based on 1.1.2. Thanks to Hadi Mostafapour
44 +* French, based on 0.8.0.2. Thanks to macbidule
45 +* German
46 +* Hungary, based on 1.0.2. Thanks to Zina
47 +* Italian. Thanks to Diego Valobra
48 +* Russian, based on 1.1.2. Thanks to PoleeK
49 +* Spanish, based on 1.1.2. Thanks to Juan Rodriguez
50 +* Swedish, based on 1.1. Thanks to Konsult
51 +* Turkish, based on 1.1.2. Thanks to Mesut Soylu
52 +* Polish, based on 1.2. Thanks to Piotr Kaczynski
48 53
49 -The documentation can be found here: [https://github.com/GM-Alex/user-access-manager/wiki](https://github.com/GM-Alex/user-access-manager/wiki)
50 -Please report bugs and feature requests here: [https://github.com/GM-Alex/user-access-manager/issues](https://github.com/GM-Alex/user-access-manager/issues)
51 -If you are a developer and want to contribute please visit [https://github.com/GM-Alex/user-access-manager](https://github.com/GM-Alex/user-access-manager)
52 -For general questions, like how to set up, best practice and so on please use the support thread here (don't post issues here): [https://wordpress.org/support/plugin/user-access-manager](https://wordpress.org/support/plugin/user-access-manager)
53 -To stay up-to-date follow me on Twitter: [GMAlex on Twitter](http://twitter.com/GM_Alex)
54 54
55 +Some language files are really old, if you are a native speaker it would be nice if you update a language file or make one for a language which is not translated yet.
55 56
57 +To stay up-to-date follow me on twitter: [GMAlex on Twitter](http://twitter.com/GM_Alex)
58 +
59 +
56 60 == Installation ==
57 -
61 +
58 62 1. Upload the full directory, with the folder, into your wp-content/plugins directory
59 63 1. Activate the plugin through the 'Plugins' menu in WordPress
60 64 1. Enjoy
61 65
@@ -65,255 +69,8 @@
65 69 Here you found the changes in each version.
66 70
67 71 Version Date Changes
68 72
69 - 2.3.17 2026/07/31 Fix a fatal type error in the switch_to_blog wrapper during the multisite database update
70 - 2.3.16 2026/07/27 Improve performance by loading the object assignments of all user groups with one query
71 - Improve performance by loading all user groups with one query instead of one per group
72 - Fix the never executed database update of the user group table id column
73 - Fix a fatal error on rest requests for hidden objects. Thanks to Erwan Le Rousseau (WPScan)
74 - Do not derive the admin panel context from the referer header anymore
75 - Fix an unauthenticated arbitrary file read through path traversal in the file delivery
76 -
77 - 2.3.15 2026/07/22 Fix REST API bypass for clients without an admin referer, like the official WordPress app
78 - Deny REST write requests to objects the user has no access to
79 - Deny REST requests for revisions and autosaves of restricted objects
80 - Add option to append the requested URL as "redirect_to" parameter to the redirect
81 -
82 - 2.3.14 2026/07/21 Fix REST API content restriction bypass exposing restricted posts to unauthenticated users
83 - Add "Redirect to origin" option
84 -
85 - 2.3.13 2026/07/10 Improve performance
86 - Fix security issue CVE-2026-15281
87 -
88 - 2.3.12 2026/05/20 Fix deprecation warning
89 - Add redis cache provider, improve nginx file handling and fix author access. Thanks to Erik Franzén
90 -
91 - 2.3.11 2026/01/23 Improve performance
92 - Improve styling
93 -
94 - 2.3.10 2026/01/22 Fix other possible type error
95 -
96 - 2.3.9 2026/01/19 Fix possible type error
97 -
98 - 2.3.8 2025/12/12 Adjust logic wp cli command logic to prevent errors
99 -
100 - 2.3.7 2025/12/10 Fix issue with MapPress
101 -
102 - 2.3.6 2025/12/10 Improve type compatibility again...
103 -
104 - 2.3.5 2025/12/10 Improve type compatibility again...
105 -
106 - 2.3.4 2025/12/09 Improve type compatibility again
107 -
108 - 2.3.3 2025/12/09 Improve compatibility again
109 -
110 - 2.3.2 2025/12/09 Adjust wordpress wrapper
111 -
112 - 2.3.1 2025/12/09 Fix possible type error
113 -
114 - 2.3.0 2025/12/09 Require now PHP 8.0
115 - Remove strftime
116 - Fix some issues
117 -
118 - 2.2.25 2025/04/22 Fixed problem with fix load_textdomain
119 -
120 - 2.2.24 2025/04/17 Fix deprecated warnings
121 - Fixed problem with load_textdomain Thanks to Christian Ludwig (chludwig)
122 -
123 - 2.2.23 2023/05/26 Fix typos
124 - Fix version_compare
125 -
126 - 2.2.22 2023/05/26 Minor change
127 -
128 - 2.2.21 2023/05/25 Adjust database compatibility #368
129 -
130 - 2.2.20 2023/03/08 Fix warning
131 -
132 - 2.2.19 2022/11/18 Add try out link
133 -
134 - 2.2.18 2022/11/14 Fix issue with label id. Thanks to elbakkali
135 - Add elementor support. Thanks to JboyJW
136 - Fix possible issue with PHP 8. Thanks to ollycross
137 - Fix attachment issue.
138 - Fix tags issue.
139 - Make extra IP header configurable.
140 -
141 - 2.2.17 2022/02/15 Fix issue with big picture handling. #350
142 -
143 - 2.2.16 2022/01/25 Check compatibility for WordPress 5.9.
144 -
145 - 2.2.15 2021/06/07 Fix possible type issues.
146 -
147 - 2.2.14 2021/04/21 Fix bulk edit.
148 - Fix permission issue.
149 - Fix redirect typing issue.
150 -
151 - 2.2.13 2021/04/15 Fix not logged-in user handling.
152 - Type fix for showEditLink.
153 -
154 - 2.2.12 2021/04/14 Fix warning.
155 - Fix jquery deprecation warning.
156 -
157 - 2.2.11 2021/03/15 Type fix for showEditLink.
158 - Set compatibility tag for WordPress 5.7.
159 -
160 - 2.2.10 2021/02/26 Lower minimum php version to 7.2.
161 -
162 - 2.2.9 2021/02/24 Type fixes for Yoast SEO plugin.
163 - Fix some other type issues.
164 -
165 - 2.2.8 2021/02/21 Some cleanup.
166 - Type fixes for the short controller.
167 - Fix some possible php notices and warnings.
168 -
169 - 2.2.7 2021/02/14 Fix issue with isAdmin.
170 -
171 - 2.2.6 2021/02/14 Fix more possible type errors.
172 -
173 - 2.2.5 2021/02/14 Fix more possible type errors if WordPress switches int to string.
174 -
175 - 2.2.4 2021/02/13 Fix type error for user object controller.
176 - Fix type error for the WordPress wrapper.
177 -
178 - 2.2.3 2021/02/13 Fix warning at settings page.
179 - Fix type error for user group handler.
180 -
181 - 2.2.2 2021/02/13 Fix type error with login form.
182 -
183 - 2.2.1 2021/02/13 Fix type error with registeredTaxonomy.
184 -
185 - 2.2.0 2021/02/11 Improve and update code base.
186 - Fix possible update bug.
187 -
188 - 2.1.12 2019/01/08 Fix multi-site file handling issue. #222
189 -
190 - 2.1.11 2018/03/16 Fix missing got_mod_rewrite function. #212
191 - Fix wrong media urls. #207
192 - Fix wrong post counts at the admin panel.
193 - Improve database updates/repairs.
194 -
195 -
196 - 2.1.10 2017/12/15 Fix Posts removed from WP_Query results in Ajax requests for unprivileged users #176
197 - Improve partly download handler
198 - Suppress errors on file delivery
199 - Improve error handling
200 - Change blog switch handling. fixes #194
201 - Fix wrong parameter name. fixes #191
202 - Improve user group sorting. closes #180
203 - Add new redirect type to the login page. closes #155
204 - Add dynamic user groups for exclude object calculation. closes #181
205 - Add filter for getUserUserGroupsForObjectAccess. closes #157
206 - Make it possible to set a default group for new media files.
207 -
208 - 2.1.9 2017/11/18 Add show content before <!--more--> tag option for all post types
209 - Fix js time input issue
210 - Fix small prepare query issue
211 - Don't switch to edit mode after user group creation #171
212 - Add sortable columns for user groups list #172
213 - Show no access image again instead of broken image
214 - Fix double user group form for media files
215 - Add option to hide the edit page option if the user doesn't have the right to edit this page #174
216 -
217 - 2.1.8 2017/11/07 Add getter for the user group handler fixes #160
218 - Fix multi-site file handling issue #159
219 -
220 - 2.1.7 2017/11/01 Improve database update prompt fixes #153
221 - Fix user group selection not saved when adding a new user issue fixes #154
222 - Add none read access option for user groups closes #144
223 - Extend file settings
224 - Add xsendfile support
225 -
226 - 2.1.6 2017/10/20 Fix "Inherited group membership for media attachments" issue #133
227 - Fix traits strict warning #145
228 -
229 - 2.1.5 2017/10/12 Refactor traits
230 - Fix datetime issue with not supported browsers
231 -
232 - 2.1.4 2017/10/10 Fix strict warnings #134
233 - Fix "Unable to select default user group for both page and post" issue #126
234 - Add NGINX reverse proxy handling #117
235 - Improve code
236 - Fix bulk edit issue #135
237 - Fix array filly issue #138
238 - Add database repair tool
239 -
240 - 2.1.3 2017/09/18 Possible fix for custom post types / taxonomies issues
241 - Fix .htaccess deletion issue
242 -
243 - 2.1.2 2017/09/17 Fix issue with not handled taxonomies #123
244 -
245 - 2.1.1 2017/09/16 Fix issue for users with small innodb page size #121
246 -
247 - 2.1.0 2017/09/15 Refactor code
248 - Implement content tags for partly restriction like UAMPPE #84
249 - Add default user groups
250 - Add time based access
251 - Add dynamic user groups #64
252 - Implement caching #75
253 - Allow html as no access content #63 #93
254 - Optimize settings screen #61
255 - Support of partial download #118
256 - Add option to toggle visibility of assigned groups text next to the edit link #111
257 - Fix incorrectly retrieving of an ID for attachments/media #116
258 -
259 - 2.0.13 2017/07/26 Add ipv6 support - Fix issue #97
260 - Change "Hide Comments" logic - Fix issue #100
261 - Fix rewrite base issue - Fix issue #107 and #103
262 - Fix vsprintf warning - Fix issue #105
263 - Fix Relevanssi compatibility issue
264 - Fix missing feature picture if file locking is disabled
265 -
266 - 2.0.12 2017/06/16 Fix media file group issue #74
267 - Fix broken file includes / excludes
268 - Fix WordPress filter issue
269 - Fix access to own post #95
270 -
271 - 2.0.11 2017/05/18 Fix FrontendController::postsPreQuery() expected to be a reference, value given error
272 -
273 - 2.0.10 2017/05/17 Fix issue of not saved groups #74
274 - Adjust password lost link #79
275 - Improve attachment access checks #78
276 - Fix not working redirect
277 -
278 - 2.0.9 2017/05/13 Improve security #76
279 -
280 - 2.0.8 2017/05/08 Fix missing rss feed if protection is disabled #68
281 -
282 - 2.0.7 2017/05/07 Fix category tree issues #59
283 - Fix mysql database errors on strict mode #60
284 - Fix possible path issue
285 - Remove settings for post_format post type (which is used for internal propose)
286 - Fix wrong database update prompt
287 - Fix issue with asgaros from #66
288 -
289 - 2.0.6 2017/04/28 Improve http error codes #24
290 - Fix wrong url on Windows servers #53
291 - Fix missing install routine #51
292 -
293 - 2.0.5 2017/04/27 Fix switch_to_blog issue
294 - Fix file handling issues
295 -
296 - 2.0.4 2017/04/26 Adjust code so that php version is checked before throwing a fatal error
297 - Improve login form #26
298 - Fix soliloquy slider incompatibility #31
299 - Improve performance #41
300 -
301 - 2.0.3 2017/04/25 Fix compatibility issue with CMS Tree Page View plugin #37
302 - Fix compatibility issue with SEO Redirection plugin #38
303 - Fix Error thrown: Class 'WP_Site_Query' not found issue #36
304 -
305 - 2.0.2 2017/04/24 Fix wp_get_current_user() error #34
306 - Fix custom post save issue after database update #33
307 -
308 - 2.0.1 2017/04/23 Fix dbDelta issue on activation
309 -
310 - 2.0.0 2017/04/23 Refactoring of the module
311 - Improve performance
312 - Full support for custom post and taxonomies.
313 - Use translate.wordpress.org for translations
314 - Many improvements and fixes
315 -
316 73 1.2.14 2017/01/07 Fix IP access issue.
317 74 Some small optimization.
318 75
319 76 1.2.13 2017/01/04 Fix tag count issue.
@@ -341,13 +98,13 @@
341 98 Refactor config handling.
342 99 Fix Yoast SEO Plugin issue.
343 100 Some other small fixes.
344 101
345 - 1.2.7.4 2016/12/08 Fix some issues related to WordPress 4.7
102 + 1.2.7.4 2016/12/08 Fix some issues related to Wordpress 4.7
346 103
347 104 1.2.7.3 2016/12/08 Fix empty category issue.
348 105
349 - 1.2.7.2 2016/12/07 Hot fix for WordPress 4.7
106 + 1.2.7.2 2016/12/07 Hot fix for Wordpress 4.7
350 107
351 108 1.2.7.1 2016/12/04 Remove deprecated function get_currentuserinfo
352 109
353 110 1.2.7.0 2016/11/30 Add experimental nginx support
@@ -396,9 +153,9 @@
396 153
397 154 1.2.4.1 2013/05/06 Fix broken images issue.
398 155 Fix duplicated key issue.
399 156 Filter file types.
400 - Use WordPress mime types instead of the config array.
157 + Use wordpress mime types instead of the config array.
401 158
402 159 1.2.4 2013/05/01 Fix add column issue.
403 160 Fix install bug.
404 161 Fix error if no user is logged in. Thanks to Robert Egger and akiko.pusu.
@@ -436,9 +193,9 @@
436 193 Improve network activation/update
437 194 Add hooks for login bar
438 195 Prepare for NextGEN Gallery extension
439 196
440 - 1.1.1.2 2010/09/29 Fix bug that an usergroup for a user wasn't saved
197 + 1.1.1.2 2010/09/29 Fix bug that a usergroup for a user wasn't saved
441 198
442 199 1.1.1.1 2010/09/29 Fix T_DNUMBER bug
443 200
444 201 1.1.1 2010/09/29 Fix custom menu bug
@@ -448,9 +205,9 @@
448 205
449 206 1.1 2010/09/28 Add plugin api
450 207 Optimized code
451 208 Improve content filtering
452 - Fix bug that user groups can't be removed from element
209 + Fix bug that user groups can't removed from element
453 210 Fix empty category bug
454 211 Fix pre/next post bug
455 212 Fix login form bug
456 213 Fix redirect bug
@@ -476,11 +233,11 @@
476 233
477 234 1.0 Beta 2010/07/09 Complete rewrite
478 235 Some new options to improve the functions
479 236
480 - 0.9.1.4 2010/06/23 Hotfix for WordPress 3.0
237 + 0.9.1.4 2010/06/23 Hotfix for Wordpress 3.0
481 238
482 - 0.9.1.3 2009/07/17 Fix "header already send"-Problem with WordPress 2.8.1
239 + 0.9.1.3 2009/07/17 Fix "header already send"-Problem with Wordpress 2.8.1
483 240 Add option to set level with full access
484 241
485 242 0.9.1.2 2009/03/29 Fix some path problems
486 243 Add a reset function
@@ -517,9 +274,9 @@
517 274 Add language support
518 275
519 276 0.7 Beta 2009/01/05 Fix: Problems with media at posts
520 277 Fix: Many other small fixes
521 - Only support up to WordPress 2.7
278 + Only support up to Wordpress 2.7
522 279 Better integration
523 280
524 281 0.62 2008/12/18 Fix: Fatal error: Only variables can
525 282 be passed by reference. Thanks to David Thompson
@@ -530,12 +287,37 @@
530 287
531 288
532 289 == Frequently Asked Questions ==
533 290
534 -See: [https://github.com/GM-Alex/user-access-manager/wiki/FAQ](https://github.com/GM-Alex/user-access-manager/wiki/FAQ)
291 +<strong>How works the User Access Manager?</strong>
535 292
293 +All posts/pages which are not in a user access group are accessible to all users. Posts/pages can put to groups by themselves, categories or recursive (most by pages).
294 +
295 +<strong>How dose "Role affiliation" work?</strong>
296 +
297 +This example will give you an overview:
298 +
299 +- Posts: Post1, Post2
300 +- Users: User1 (admin), User2 (subscriber), User3 (subscriber)
301 +
302 +Groups:
303 +
304 +- Group1: Users: User2, User3 | Posts: Post1 | Role affiliation: subscriber
305 +- Group2: Users: User3 | Posts: Post2 | Role affiliation: -
306 +
307 +Access:
308 +
309 +- Post1: User1 because he is a admin, User2 because he is in the group and a subscriber, User3 he is a subscriber (to this group all subscribers has access!)
310 +- Post2: User1 because he is a admin, User3 because he is in the group (only group members has access because there is no role affiliation!)
311 +
312 +<strong>I get an login box "WP-Files", what can I do?</strong>
313 +
314 +- You can deactivate the file locking at the UAM settings.
315 +- You can replace your media files in your posts. Just delete the old link and insert it again. (A new working link will generated)
316 +
317 +
536 318 == Screenshots ==
537 319
538 -1. The group manager.
320 +1. The group manger.
539 321 2. The setting screen
540 322 3. The setup screen.
541 -4. Integration into post overview.
323 +4. Integration into post overview.