| @@ -1,40 +1,34 @@ | ||
| 1 | 1 | === User Access Manager === |
| 2 | 2 | Contributors: GM_Alex |
| 3 | 3 | Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=1947052 |
| 4 | -Tags: member access, user access manager, user management, access | |
| 4 | +Tags: admin, access, member area, members, member, member access, page, pages, post, posts, private, privacy, restrict, user, user access manager, user management | |
| 5 | 5 | Requires at least: 4.7 |
| 6 | -Requires PHP: 8.0 | |
| 7 | -Tested up to: 7.0 | |
| 8 | -Stable tag: 2.3.17 | |
| 9 | -License: GPLv2 or later | |
| 10 | -License URI: https://www.gnu.org/licenses/gpl-2.0.html | |
| 6 | +Tested up to: 4.8 | |
| 7 | +Stable tag: 2.0.13 | |
| 11 | 8 | |
| 12 | 9 | With the "User Access Manager"-plugin you can manage the access to your posts, pages and files. |
| 13 | 10 | |
| 14 | 11 | == Description == |
| 15 | 12 | |
| 16 | -The “User Access Manager”-plugin for WordPress allows you to manage the access of your content. This is useful if you need a member area, a private section at your blog, or you want that other people can write at your blog but not everywhere. Including all post type (post, pages etc.), taxonomies (categories etc.) and files by creating user groups. Just assign the content you want to restrict und and your registered users which should have access to a group. From now on the content is only accessible and writable for the specified group. | |
| 13 | +With the "User Access Manager"-plugin you can manage the access to your posts, pages and files. You only create a user group, put registered users to this and set up the rights for this group. From now on the post/page is only accessible and writable for the specified group. This plugin is useful if you need a member area or a private section at your blog or you want that other people can write at your blog but not everywhere. | |
| 17 | 14 | |
| 18 | -<em>Try it out</em> | |
| 15 | +Appeal: If it works click the "Works" button, if it don't works click the "Broken" button and report the issue. That is the only way to find bugs and see if the plugin works proper. Thanks. | |
| 19 | 16 | |
| 20 | -You can try it out at TasteWP.com before install: [Try user access manager](https://demo.tastewp.com/user-access-manager?a=jlQ7F1va) (affiliate link) | |
| 21 | - | |
| 22 | 17 | <em>Feature list</em> |
| 23 | 18 | |
| 24 | 19 | * User groups |
| 25 | 20 | * Set separate access for readers and editors |
| 26 | 21 | * Set access by user groups |
| 27 | -* Set default user groups | |
| 28 | -* Set time based access | |
| 29 | -* User-defined post type (posts, pages etc.) title (if no access) | |
| 30 | -* User-defined post type (posts, pages etc.) text (if no access) | |
| 22 | +* Set access by post categories | |
| 23 | +* User-defined post/page title (if no access) | |
| 24 | +* User-defined post/page text (if no access) | |
| 31 | 25 | * Optional login form (if no access) |
| 32 | 26 | * User-defined comment text (if no access) |
| 33 | -* Hide complete post types (posts, pages etc.) | |
| 34 | -* Hide elements in the navigation | |
| 27 | +* Hide complete post/page | |
| 28 | +* Hide pages in navigation | |
| 35 | 29 | * Redirecting users to other pages (if no access) |
| 36 | -* Recursive locking of content | |
| 30 | +* Recursive locking of posts/pages | |
| 37 | 31 | * Limited access to uploaded files |
| 38 | 32 | * Full integrated at the admin panel |
| 39 | 33 | * Multilingual support |
| 40 | 34 | * Also protect your rss feeds |
| @@ -39,9 +33,8 @@ | ||
| 39 | 33 | * Multilingual support |
| 40 | 34 | * Also protect your rss feeds |
| 41 | 35 | * Give access by IP-address |
| 42 | 36 | * Plugin-Api to use the User Access Manager in your on plugins or extend other plugins |
| 43 | -* [UAMPPE](https://wordpress.org/plugins/user-access-manager-private-public-extension/) like behaviour is now build in (Expect negation like !groupName and showprivate and shownotauthorized parameter) | |
| 44 | 37 | |
| 45 | 38 | <em>Included languages</em> |
| 46 | 39 | |
| 47 | 40 | See [https://translate.wordpress.org/projects/wp-plugins/user-access-manager](https://translate.wordpress.org/projects/wp-plugins/user-access-manager) |
| @@ -48,10 +41,10 @@ | ||
| 48 | 41 | |
| 49 | 42 | The documentation can be found here: [https://github.com/GM-Alex/user-access-manager/wiki](https://github.com/GM-Alex/user-access-manager/wiki) |
| 50 | 43 | Please report bugs and feature requests here: [https://github.com/GM-Alex/user-access-manager/issues](https://github.com/GM-Alex/user-access-manager/issues) |
| 51 | 44 | If you are a developer and want to contribute please visit [https://github.com/GM-Alex/user-access-manager](https://github.com/GM-Alex/user-access-manager) |
| 52 | -For general questions, like how to set up, best practice and so on please use the support thread here (don't post issues here): [https://wordpress.org/support/plugin/user-access-manager](https://wordpress.org/support/plugin/user-access-manager) | |
| 53 | -To stay up-to-date follow me on Twitter: [GMAlex on Twitter](http://twitter.com/GM_Alex) | |
| 45 | +For general questions, like how to setup, best practice and so on please use the support thread here (don't post issues here): [https://wordpress.org/support/plugin/user-access-manager](https://wordpress.org/support/plugin/user-access-manager) | |
| 46 | +To stay up-to-date follow me on twitter: [GMAlex on Twitter](http://twitter.com/GM_Alex) | |
| 54 | 47 | |
| 55 | 48 | |
| 56 | 49 | == Installation == |
| 57 | 50 | |
| @@ -65,198 +58,8 @@ | ||
| 65 | 58 | Here you found the changes in each version. |
| 66 | 59 | |
| 67 | 60 | Version Date Changes |
| 68 | 61 | |
| 69 | - 2.3.17 2026/07/31 Fix a fatal type error in the switch_to_blog wrapper during the multisite database update | |
| 70 | - 2.3.16 2026/07/27 Improve performance by loading the object assignments of all user groups with one query | |
| 71 | - Improve performance by loading all user groups with one query instead of one per group | |
| 72 | - Fix the never executed database update of the user group table id column | |
| 73 | - Fix a fatal error on rest requests for hidden objects. Thanks to Erwan Le Rousseau (WPScan) | |
| 74 | - Do not derive the admin panel context from the referer header anymore | |
| 75 | - Fix an unauthenticated arbitrary file read through path traversal in the file delivery | |
| 76 | - | |
| 77 | - 2.3.15 2026/07/22 Fix REST API bypass for clients without an admin referer, like the official WordPress app | |
| 78 | - Deny REST write requests to objects the user has no access to | |
| 79 | - Deny REST requests for revisions and autosaves of restricted objects | |
| 80 | - Add option to append the requested URL as "redirect_to" parameter to the redirect | |
| 81 | - | |
| 82 | - 2.3.14 2026/07/21 Fix REST API content restriction bypass exposing restricted posts to unauthenticated users | |
| 83 | - Add "Redirect to origin" option | |
| 84 | - | |
| 85 | - 2.3.13 2026/07/10 Improve performance | |
| 86 | - Fix security issue CVE-2026-15281 | |
| 87 | - | |
| 88 | - 2.3.12 2026/05/20 Fix deprecation warning | |
| 89 | - Add redis cache provider, improve nginx file handling and fix author access. Thanks to Erik Franzén | |
| 90 | - | |
| 91 | - 2.3.11 2026/01/23 Improve performance | |
| 92 | - Improve styling | |
| 93 | - | |
| 94 | - 2.3.10 2026/01/22 Fix other possible type error | |
| 95 | - | |
| 96 | - 2.3.9 2026/01/19 Fix possible type error | |
| 97 | - | |
| 98 | - 2.3.8 2025/12/12 Adjust logic wp cli command logic to prevent errors | |
| 99 | - | |
| 100 | - 2.3.7 2025/12/10 Fix issue with MapPress | |
| 101 | - | |
| 102 | - 2.3.6 2025/12/10 Improve type compatibility again... | |
| 103 | - | |
| 104 | - 2.3.5 2025/12/10 Improve type compatibility again... | |
| 105 | - | |
| 106 | - 2.3.4 2025/12/09 Improve type compatibility again | |
| 107 | - | |
| 108 | - 2.3.3 2025/12/09 Improve compatibility again | |
| 109 | - | |
| 110 | - 2.3.2 2025/12/09 Adjust wordpress wrapper | |
| 111 | - | |
| 112 | - 2.3.1 2025/12/09 Fix possible type error | |
| 113 | - | |
| 114 | - 2.3.0 2025/12/09 Require now PHP 8.0 | |
| 115 | - Remove strftime | |
| 116 | - Fix some issues | |
| 117 | - | |
| 118 | - 2.2.25 2025/04/22 Fixed problem with fix load_textdomain | |
| 119 | - | |
| 120 | - 2.2.24 2025/04/17 Fix deprecated warnings | |
| 121 | - Fixed problem with load_textdomain Thanks to Christian Ludwig (chludwig) | |
| 122 | - | |
| 123 | - 2.2.23 2023/05/26 Fix typos | |
| 124 | - Fix version_compare | |
| 125 | - | |
| 126 | - 2.2.22 2023/05/26 Minor change | |
| 127 | - | |
| 128 | - 2.2.21 2023/05/25 Adjust database compatibility #368 | |
| 129 | - | |
| 130 | - 2.2.20 2023/03/08 Fix warning | |
| 131 | - | |
| 132 | - 2.2.19 2022/11/18 Add try out link | |
| 133 | - | |
| 134 | - 2.2.18 2022/11/14 Fix issue with label id. Thanks to elbakkali | |
| 135 | - Add elementor support. Thanks to JboyJW | |
| 136 | - Fix possible issue with PHP 8. Thanks to ollycross | |
| 137 | - Fix attachment issue. | |
| 138 | - Fix tags issue. | |
| 139 | - Make extra IP header configurable. | |
| 140 | - | |
| 141 | - 2.2.17 2022/02/15 Fix issue with big picture handling. #350 | |
| 142 | - | |
| 143 | - 2.2.16 2022/01/25 Check compatibility for WordPress 5.9. | |
| 144 | - | |
| 145 | - 2.2.15 2021/06/07 Fix possible type issues. | |
| 146 | - | |
| 147 | - 2.2.14 2021/04/21 Fix bulk edit. | |
| 148 | - Fix permission issue. | |
| 149 | - Fix redirect typing issue. | |
| 150 | - | |
| 151 | - 2.2.13 2021/04/15 Fix not logged-in user handling. | |
| 152 | - Type fix for showEditLink. | |
| 153 | - | |
| 154 | - 2.2.12 2021/04/14 Fix warning. | |
| 155 | - Fix jquery deprecation warning. | |
| 156 | - | |
| 157 | - 2.2.11 2021/03/15 Type fix for showEditLink. | |
| 158 | - Set compatibility tag for WordPress 5.7. | |
| 159 | - | |
| 160 | - 2.2.10 2021/02/26 Lower minimum php version to 7.2. | |
| 161 | - | |
| 162 | - 2.2.9 2021/02/24 Type fixes for Yoast SEO plugin. | |
| 163 | - Fix some other type issues. | |
| 164 | - | |
| 165 | - 2.2.8 2021/02/21 Some cleanup. | |
| 166 | - Type fixes for the short controller. | |
| 167 | - Fix some possible php notices and warnings. | |
| 168 | - | |
| 169 | - 2.2.7 2021/02/14 Fix issue with isAdmin. | |
| 170 | - | |
| 171 | - 2.2.6 2021/02/14 Fix more possible type errors. | |
| 172 | - | |
| 173 | - 2.2.5 2021/02/14 Fix more possible type errors if WordPress switches int to string. | |
| 174 | - | |
| 175 | - 2.2.4 2021/02/13 Fix type error for user object controller. | |
| 176 | - Fix type error for the WordPress wrapper. | |
| 177 | - | |
| 178 | - 2.2.3 2021/02/13 Fix warning at settings page. | |
| 179 | - Fix type error for user group handler. | |
| 180 | - | |
| 181 | - 2.2.2 2021/02/13 Fix type error with login form. | |
| 182 | - | |
| 183 | - 2.2.1 2021/02/13 Fix type error with registeredTaxonomy. | |
| 184 | - | |
| 185 | - 2.2.0 2021/02/11 Improve and update code base. | |
| 186 | - Fix possible update bug. | |
| 187 | - | |
| 188 | - 2.1.12 2019/01/08 Fix multi-site file handling issue. #222 | |
| 189 | - | |
| 190 | - 2.1.11 2018/03/16 Fix missing got_mod_rewrite function. #212 | |
| 191 | - Fix wrong media urls. #207 | |
| 192 | - Fix wrong post counts at the admin panel. | |
| 193 | - Improve database updates/repairs. | |
| 194 | - | |
| 195 | - | |
| 196 | - 2.1.10 2017/12/15 Fix Posts removed from WP_Query results in Ajax requests for unprivileged users #176 | |
| 197 | - Improve partly download handler | |
| 198 | - Suppress errors on file delivery | |
| 199 | - Improve error handling | |
| 200 | - Change blog switch handling. fixes #194 | |
| 201 | - Fix wrong parameter name. fixes #191 | |
| 202 | - Improve user group sorting. closes #180 | |
| 203 | - Add new redirect type to the login page. closes #155 | |
| 204 | - Add dynamic user groups for exclude object calculation. closes #181 | |
| 205 | - Add filter for getUserUserGroupsForObjectAccess. closes #157 | |
| 206 | - Make it possible to set a default group for new media files. | |
| 207 | - | |
| 208 | - 2.1.9 2017/11/18 Add show content before <!--more--> tag option for all post types | |
| 209 | - Fix js time input issue | |
| 210 | - Fix small prepare query issue | |
| 211 | - Don't switch to edit mode after user group creation #171 | |
| 212 | - Add sortable columns for user groups list #172 | |
| 213 | - Show no access image again instead of broken image | |
| 214 | - Fix double user group form for media files | |
| 215 | - Add option to hide the edit page option if the user doesn't have the right to edit this page #174 | |
| 216 | - | |
| 217 | - 2.1.8 2017/11/07 Add getter for the user group handler fixes #160 | |
| 218 | - Fix multi-site file handling issue #159 | |
| 219 | - | |
| 220 | - 2.1.7 2017/11/01 Improve database update prompt fixes #153 | |
| 221 | - Fix user group selection not saved when adding a new user issue fixes #154 | |
| 222 | - Add none read access option for user groups closes #144 | |
| 223 | - Extend file settings | |
| 224 | - Add xsendfile support | |
| 225 | - | |
| 226 | - 2.1.6 2017/10/20 Fix "Inherited group membership for media attachments" issue #133 | |
| 227 | - Fix traits strict warning #145 | |
| 228 | - | |
| 229 | - 2.1.5 2017/10/12 Refactor traits | |
| 230 | - Fix datetime issue with not supported browsers | |
| 231 | - | |
| 232 | - 2.1.4 2017/10/10 Fix strict warnings #134 | |
| 233 | - Fix "Unable to select default user group for both page and post" issue #126 | |
| 234 | - Add NGINX reverse proxy handling #117 | |
| 235 | - Improve code | |
| 236 | - Fix bulk edit issue #135 | |
| 237 | - Fix array filly issue #138 | |
| 238 | - Add database repair tool | |
| 239 | - | |
| 240 | - 2.1.3 2017/09/18 Possible fix for custom post types / taxonomies issues | |
| 241 | - Fix .htaccess deletion issue | |
| 242 | - | |
| 243 | - 2.1.2 2017/09/17 Fix issue with not handled taxonomies #123 | |
| 244 | - | |
| 245 | - 2.1.1 2017/09/16 Fix issue for users with small innodb page size #121 | |
| 246 | - | |
| 247 | - 2.1.0 2017/09/15 Refactor code | |
| 248 | - Implement content tags for partly restriction like UAMPPE #84 | |
| 249 | - Add default user groups | |
| 250 | - Add time based access | |
| 251 | - Add dynamic user groups #64 | |
| 252 | - Implement caching #75 | |
| 253 | - Allow html as no access content #63 #93 | |
| 254 | - Optimize settings screen #61 | |
| 255 | - Support of partial download #118 | |
| 256 | - Add option to toggle visibility of assigned groups text next to the edit link #111 | |
| 257 | - Fix incorrectly retrieving of an ID for attachments/media #116 | |
| 258 | - | |
| 259 | 62 | 2.0.13 2017/07/26 Add ipv6 support - Fix issue #97 |
| 260 | 63 | Change "Hide Comments" logic - Fix issue #100 |
| 261 | 64 | Fix rewrite base issue - Fix issue #107 and #103 |
| 262 | 65 | Fix vsprintf warning - Fix issue #105 |
| @@ -264,9 +67,9 @@ | ||
| 264 | 67 | Fix missing feature picture if file locking is disabled |
| 265 | 68 | |
| 266 | 69 | 2.0.12 2017/06/16 Fix media file group issue #74 |
| 267 | 70 | Fix broken file includes / excludes |
| 268 | - Fix WordPress filter issue | |
| 71 | + Fix wordpress filter issue | |
| 269 | 72 | Fix access to own post #95 |
| 270 | 73 | |
| 271 | 74 | 2.0.11 2017/05/18 Fix FrontendController::postsPreQuery() expected to be a reference, value given error |
| 272 | 75 | |
| @@ -286,9 +89,9 @@ | ||
| 286 | 89 | Fix wrong database update prompt |
| 287 | 90 | Fix issue with asgaros from #66 |
| 288 | 91 | |
| 289 | 92 | 2.0.6 2017/04/28 Improve http error codes #24 |
| 290 | - Fix wrong url on Windows servers #53 | |
| 93 | + Fix wrong url on windows servers #53 | |
| 291 | 94 | Fix missing install routine #51 |
| 292 | 95 | |
| 293 | 96 | 2.0.5 2017/04/27 Fix switch_to_blog issue |
| 294 | 97 | Fix file handling issues |
| @@ -341,13 +144,13 @@ | ||
| 341 | 144 | Refactor config handling. |
| 342 | 145 | Fix Yoast SEO Plugin issue. |
| 343 | 146 | Some other small fixes. |
| 344 | 147 | |
| 345 | - 1.2.7.4 2016/12/08 Fix some issues related to WordPress 4.7 | |
| 148 | + 1.2.7.4 2016/12/08 Fix some issues related to Wordpress 4.7 | |
| 346 | 149 | |
| 347 | 150 | 1.2.7.3 2016/12/08 Fix empty category issue. |
| 348 | 151 | |
| 349 | - 1.2.7.2 2016/12/07 Hot fix for WordPress 4.7 | |
| 152 | + 1.2.7.2 2016/12/07 Hot fix for Wordpress 4.7 | |
| 350 | 153 | |
| 351 | 154 | 1.2.7.1 2016/12/04 Remove deprecated function get_currentuserinfo |
| 352 | 155 | |
| 353 | 156 | 1.2.7.0 2016/11/30 Add experimental nginx support |
| @@ -396,9 +199,9 @@ | ||
| 396 | 199 | |
| 397 | 200 | 1.2.4.1 2013/05/06 Fix broken images issue. |
| 398 | 201 | Fix duplicated key issue. |
| 399 | 202 | Filter file types. |
| 400 | - Use WordPress mime types instead of the config array. | |
| 203 | + Use wordpress mime types instead of the config array. | |
| 401 | 204 | |
| 402 | 205 | 1.2.4 2013/05/01 Fix add column issue. |
| 403 | 206 | Fix install bug. |
| 404 | 207 | Fix error if no user is logged in. Thanks to Robert Egger and akiko.pusu. |
| @@ -436,9 +239,9 @@ | ||
| 436 | 239 | Improve network activation/update |
| 437 | 240 | Add hooks for login bar |
| 438 | 241 | Prepare for NextGEN Gallery extension |
| 439 | 242 | |
| 440 | - 1.1.1.2 2010/09/29 Fix bug that an usergroup for a user wasn't saved | |
| 243 | + 1.1.1.2 2010/09/29 Fix bug that a usergroup for a user wasn't saved | |
| 441 | 244 | |
| 442 | 245 | 1.1.1.1 2010/09/29 Fix T_DNUMBER bug |
| 443 | 246 | |
| 444 | 247 | 1.1.1 2010/09/29 Fix custom menu bug |
| @@ -448,9 +251,9 @@ | ||
| 448 | 251 | |
| 449 | 252 | 1.1 2010/09/28 Add plugin api |
| 450 | 253 | Optimized code |
| 451 | 254 | Improve content filtering |
| 452 | - Fix bug that user groups can't be removed from element | |
| 255 | + Fix bug that user groups can't removed from element | |
| 453 | 256 | Fix empty category bug |
| 454 | 257 | Fix pre/next post bug |
| 455 | 258 | Fix login form bug |
| 456 | 259 | Fix redirect bug |
| @@ -476,11 +279,11 @@ | ||
| 476 | 279 | |
| 477 | 280 | 1.0 Beta 2010/07/09 Complete rewrite |
| 478 | 281 | Some new options to improve the functions |
| 479 | 282 | |
| 480 | - 0.9.1.4 2010/06/23 Hotfix for WordPress 3.0 | |
| 283 | + 0.9.1.4 2010/06/23 Hotfix for Wordpress 3.0 | |
| 481 | 284 | |
| 482 | - 0.9.1.3 2009/07/17 Fix "header already send"-Problem with WordPress 2.8.1 | |
| 285 | + 0.9.1.3 2009/07/17 Fix "header already send"-Problem with Wordpress 2.8.1 | |
| 483 | 286 | Add option to set level with full access |
| 484 | 287 | |
| 485 | 288 | 0.9.1.2 2009/03/29 Fix some path problems |
| 486 | 289 | Add a reset function |
| @@ -517,9 +320,9 @@ | ||
| 517 | 320 | Add language support |
| 518 | 321 | |
| 519 | 322 | 0.7 Beta 2009/01/05 Fix: Problems with media at posts |
| 520 | 323 | Fix: Many other small fixes |
| 521 | - Only support up to WordPress 2.7 | |
| 324 | + Only support up to Wordpress 2.7 | |
| 522 | 325 | Better integration |
| 523 | 326 | |
| 524 | 327 | 0.62 2008/12/18 Fix: Fatal error: Only variables can |
| 525 | 328 | be passed by reference. Thanks to David Thompson |
| @@ -534,8 +337,8 @@ | ||
| 534 | 337 | See: [https://github.com/GM-Alex/user-access-manager/wiki/FAQ](https://github.com/GM-Alex/user-access-manager/wiki/FAQ) |
| 535 | 338 | |
| 536 | 339 | == Screenshots == |
| 537 | 340 | |
| 538 | -1. The group manager. | |
| 341 | +1. The group manger. | |
| 539 | 342 | 2. The setting screen |
| 540 | 343 | 3. The setup screen. |
| 541 | 344 | 4. Integration into post overview. |
