PluginProbe
User Access Manager / 2.0.3
User Access Manager v2.0.3
2.3.20 2.3.19 2.3.18 2.3.17 2.3.16 2.3.15 2.3.14 2.3.13 trunk 0.6 0.6.1 0.6.2 0.7 0.7 Beta 0.7.0.1 0.8 0.8.0.1 0.8.0.2 0.9 0.9.1 0.9.1.1 0.9.1.2 0.9.1.3 0.9.1.4 1.0 All 136 releases
← All changes | readme.txt +25 -277 2.3.20 → 2.0.3 View file →
@@ -1,40 +1,34 @@
1 1 === User Access Manager ===
2 2 Contributors: GM_Alex
3 3 Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=1947052
4 -Tags: member access, user access manager, user management, access
4 +Tags: admin, access, member area, members, member, member access, page, pages, post, posts, private, privacy, restrict, user, user access manager, user management
5 5 Requires at least: 4.7
6 -Requires PHP: 8.0
7 -Tested up to: 7.1
8 -Stable tag: 2.3.20
9 -License: GPLv2 or later
10 -License URI: https://www.gnu.org/licenses/gpl-2.0.html
6 +Tested up to: 4.7.4
7 +Stable tag: 2.0.3
11 8
12 9 With the "User Access Manager"-plugin you can manage the access to your posts, pages and files.
13 10
14 11 == Description ==
15 12
16 -The “User Access Manager”-plugin for WordPress allows you to manage the access of your content. This is useful if you need a member area, a private section at your blog, or you want that other people can write at your blog but not everywhere. Including all post type (post, pages etc.), taxonomies (categories etc.) and files by creating user groups. Just assign the content you want to restrict und and your registered users which should have access to a group. From now on the content is only accessible and writable for the specified group.
13 +With the "User Access Manager"-plugin you can manage the access to your posts, pages and files. You only create a user group, put registered users to this and set up the rights for this group. From now on the post/page is only accessible and writable for the specified group. This plugin is useful if you need a member area or a private section at your blog or you want that other people can write at your blog but not everywhere.
17 14
18 -<em>Try it out</em>
15 +Appeal: If it works click the "Works" button, if it don't works click the "Broken" button and report the issue. That is the only way to find bugs and see if the plugin works proper. Thanks.
19 16
20 -You can try it out at TasteWP.com before install: [Try user access manager](https://demo.tastewp.com/user-access-manager?a=jlQ7F1va) (affiliate link)
21 -
22 17 <em>Feature list</em>
23 18
24 19 * User groups
25 20 * Set separate access for readers and editors
26 21 * Set access by user groups
27 -* Set default user groups
28 -* Set time based access
29 -* User-defined post type (posts, pages etc.) title (if no access)
30 -* User-defined post type (posts, pages etc.) text (if no access)
22 +* Set access by post categories
23 +* User-defined post/page title (if no access)
24 +* User-defined post/page text (if no access)
31 25 * Optional login form (if no access)
32 26 * User-defined comment text (if no access)
33 -* Hide complete post types (posts, pages etc.)
34 -* Hide elements in the navigation
27 +* Hide complete post/page
28 +* Hide pages in navigation
35 29 * Redirecting users to other pages (if no access)
36 -* Recursive locking of content
30 +* Recursive locking of posts/pages
37 31 * Limited access to uploaded files
38 32 * Full integrated at the admin panel
39 33 * Multilingual support
40 34 * Also protect your rss feeds
@@ -39,23 +33,22 @@
39 33 * Multilingual support
40 34 * Also protect your rss feeds
41 35 * Give access by IP-address
42 36 * Plugin-Api to use the User Access Manager in your on plugins or extend other plugins
43 -* [UAMPPE](https://wordpress.org/plugins/user-access-manager-private-public-extension/) like behaviour is now build in (Expect negation like !groupName and showprivate and shownotauthorized parameter)
44 37
45 38 <em>Included languages</em>
46 39
47 -See [https://translate.wordpress.org/projects/wp-plugins/user-access-manager](https://translate.wordpress.org/projects/wp-plugins/user-access-manager)
40 +See https://translate.wordpress.org/projects/wp-plugins/user-access-manager
48 41
49 42 The documentation can be found here: [https://github.com/GM-Alex/user-access-manager/wiki](https://github.com/GM-Alex/user-access-manager/wiki)
43 +For support questions please use the support thread here: [https://wordpress.org/support/plugin/user-access-manager](https://wordpress.org/support/plugin/user-access-manager)
50 44 Please report bugs and feature requests here: [https://github.com/GM-Alex/user-access-manager/issues](https://github.com/GM-Alex/user-access-manager/issues)
51 45 If you are a developer and want to contribute please visit [https://github.com/GM-Alex/user-access-manager](https://github.com/GM-Alex/user-access-manager)
52 -For general questions, like how to set up, best practice and so on please use the support thread here (don't post issues here): [https://wordpress.org/support/plugin/user-access-manager](https://wordpress.org/support/plugin/user-access-manager)
53 -To stay up-to-date follow me on Twitter: [GMAlex on Twitter](http://twitter.com/GM_Alex)
46 +To stay up-to-date follow me on twitter: [GMAlex on Twitter](http://twitter.com/GM_Alex)
54 47
55 48
56 49 == Installation ==
57 -
50 +
58 51 1. Upload the full directory, with the folder, into your wp-content/plugins directory
59 52 1. Activate the plugin through the 'Plugins' menu in WordPress
60 53 1. Enjoy
61 54
@@ -65,253 +58,8 @@
65 58 Here you found the changes in each version.
66 59
67 60 Version Date Changes
68 61
69 - 2.3.20 2026/09/09 Fix the queries failing on MariaDB 12.3, which turned to_date into a reserved word
70 - Quote the table and column names in all queries
71 - Fix the database update to version 1.0, which failed and left the group assignments unmigrated
72 - Migrate the user and role assignments in that update instead of dropping them with their tables
73 -
74 - 2.3.19 2026/08/14 Fix a reflected cross site scripting issue in the backend request parameters
75 - Fix locked documents answering with a 404 page instead of the no rights page
76 -
77 - 2.3.18 2026/08/03 Fix the missing preview images of protected documents like PDFs in the media library
78 - Rework the backend forms and the group assignment UI
79 - Fix the assignment time being discarded for users and roles added by the group search
80 - Escape the names shown in the group search results
81 -
82 - 2.3.17 2026/07/31 Fix a fatal type error in the switch_to_blog wrapper during the multisite database update
83 - 2.3.16 2026/07/27 Improve performance by loading the object assignments of all user groups with one query
84 - Improve performance by loading all user groups with one query instead of one per group
85 - Fix the never executed database update of the user group table id column
86 - Fix a fatal error on rest requests for hidden objects. Thanks to Erwan Le Rousseau (WPScan)
87 - Do not derive the admin panel context from the referer header anymore
88 - Fix an unauthenticated arbitrary file read through path traversal in the file delivery
89 -
90 - 2.3.15 2026/07/22 Fix REST API bypass for clients without an admin referer, like the official WordPress app
91 - Deny REST write requests to objects the user has no access to
92 - Deny REST requests for revisions and autosaves of restricted objects
93 - Add option to append the requested URL as "redirect_to" parameter to the redirect
94 -
95 - 2.3.14 2026/07/21 Fix REST API content restriction bypass exposing restricted posts to unauthenticated users
96 - Add "Redirect to origin" option
97 -
98 - 2.3.13 2026/07/10 Improve performance
99 - Fix security issue CVE-2026-15281
100 -
101 - 2.3.12 2026/05/20 Fix deprecation warning
102 - Add redis cache provider, improve nginx file handling and fix author access. Thanks to Erik Franzén
103 -
104 - 2.3.11 2026/01/23 Improve performance
105 - Improve styling
106 -
107 - 2.3.10 2026/01/22 Fix other possible type error
108 -
109 - 2.3.9 2026/01/19 Fix possible type error
110 -
111 - 2.3.8 2025/12/12 Adjust logic wp cli command logic to prevent errors
112 -
113 - 2.3.7 2025/12/10 Fix issue with MapPress
114 -
115 - 2.3.6 2025/12/10 Improve type compatibility again...
116 -
117 - 2.3.5 2025/12/10 Improve type compatibility again...
118 -
119 - 2.3.4 2025/12/09 Improve type compatibility again
120 -
121 - 2.3.3 2025/12/09 Improve compatibility again
122 -
123 - 2.3.2 2025/12/09 Adjust wordpress wrapper
124 -
125 - 2.3.1 2025/12/09 Fix possible type error
126 -
127 - 2.3.0 2025/12/09 Require now PHP 8.0
128 - Remove strftime
129 - Fix some issues
130 -
131 - 2.2.25 2025/04/22 Fixed problem with fix load_textdomain
132 -
133 - 2.2.24 2025/04/17 Fix deprecated warnings
134 - Fixed problem with load_textdomain Thanks to Christian Ludwig (chludwig)
135 -
136 - 2.2.23 2023/05/26 Fix typos
137 - Fix version_compare
138 -
139 - 2.2.22 2023/05/26 Minor change
140 -
141 - 2.2.21 2023/05/25 Adjust database compatibility #368
142 -
143 - 2.2.20 2023/03/08 Fix warning
144 -
145 - 2.2.19 2022/11/18 Add try out link
146 -
147 - 2.2.18 2022/11/14 Fix issue with label id. Thanks to elbakkali
148 - Add elementor support. Thanks to JboyJW
149 - Fix possible issue with PHP 8. Thanks to ollycross
150 - Fix attachment issue.
151 - Fix tags issue.
152 - Make extra IP header configurable.
153 -
154 - 2.2.17 2022/02/15 Fix issue with big picture handling. #350
155 -
156 - 2.2.16 2022/01/25 Check compatibility for WordPress 5.9.
157 -
158 - 2.2.15 2021/06/07 Fix possible type issues.
159 -
160 - 2.2.14 2021/04/21 Fix bulk edit.
161 - Fix permission issue.
162 - Fix redirect typing issue.
163 -
164 - 2.2.13 2021/04/15 Fix not logged-in user handling.
165 - Type fix for showEditLink.
166 -
167 - 2.2.12 2021/04/14 Fix warning.
168 - Fix jquery deprecation warning.
169 -
170 - 2.2.11 2021/03/15 Type fix for showEditLink.
171 - Set compatibility tag for WordPress 5.7.
172 -
173 - 2.2.10 2021/02/26 Lower minimum php version to 7.2.
174 -
175 - 2.2.9 2021/02/24 Type fixes for Yoast SEO plugin.
176 - Fix some other type issues.
177 -
178 - 2.2.8 2021/02/21 Some cleanup.
179 - Type fixes for the short controller.
180 - Fix some possible php notices and warnings.
181 -
182 - 2.2.7 2021/02/14 Fix issue with isAdmin.
183 -
184 - 2.2.6 2021/02/14 Fix more possible type errors.
185 -
186 - 2.2.5 2021/02/14 Fix more possible type errors if WordPress switches int to string.
187 -
188 - 2.2.4 2021/02/13 Fix type error for user object controller.
189 - Fix type error for the WordPress wrapper.
190 -
191 - 2.2.3 2021/02/13 Fix warning at settings page.
192 - Fix type error for user group handler.
193 -
194 - 2.2.2 2021/02/13 Fix type error with login form.
195 -
196 - 2.2.1 2021/02/13 Fix type error with registeredTaxonomy.
197 -
198 - 2.2.0 2021/02/11 Improve and update code base.
199 - Fix possible update bug.
200 -
201 - 2.1.12 2019/01/08 Fix multi-site file handling issue. #222
202 -
203 - 2.1.11 2018/03/16 Fix missing got_mod_rewrite function. #212
204 - Fix wrong media urls. #207
205 - Fix wrong post counts at the admin panel.
206 - Improve database updates/repairs.
207 -
208 -
209 - 2.1.10 2017/12/15 Fix Posts removed from WP_Query results in Ajax requests for unprivileged users #176
210 - Improve partly download handler
211 - Suppress errors on file delivery
212 - Improve error handling
213 - Change blog switch handling. fixes #194
214 - Fix wrong parameter name. fixes #191
215 - Improve user group sorting. closes #180
216 - Add new redirect type to the login page. closes #155
217 - Add dynamic user groups for exclude object calculation. closes #181
218 - Add filter for getUserUserGroupsForObjectAccess. closes #157
219 - Make it possible to set a default group for new media files.
220 -
221 - 2.1.9 2017/11/18 Add show content before <!--more--> tag option for all post types
222 - Fix js time input issue
223 - Fix small prepare query issue
224 - Don't switch to edit mode after user group creation #171
225 - Add sortable columns for user groups list #172
226 - Show no access image again instead of broken image
227 - Fix double user group form for media files
228 - Add option to hide the edit page option if the user doesn't have the right to edit this page #174
229 -
230 - 2.1.8 2017/11/07 Add getter for the user group handler fixes #160
231 - Fix multi-site file handling issue #159
232 -
233 - 2.1.7 2017/11/01 Improve database update prompt fixes #153
234 - Fix user group selection not saved when adding a new user issue fixes #154
235 - Add none read access option for user groups closes #144
236 - Extend file settings
237 - Add xsendfile support
238 -
239 - 2.1.6 2017/10/20 Fix "Inherited group membership for media attachments" issue #133
240 - Fix traits strict warning #145
241 -
242 - 2.1.5 2017/10/12 Refactor traits
243 - Fix datetime issue with not supported browsers
244 -
245 - 2.1.4 2017/10/10 Fix strict warnings #134
246 - Fix "Unable to select default user group for both page and post" issue #126
247 - Add NGINX reverse proxy handling #117
248 - Improve code
249 - Fix bulk edit issue #135
250 - Fix array filly issue #138
251 - Add database repair tool
252 -
253 - 2.1.3 2017/09/18 Possible fix for custom post types / taxonomies issues
254 - Fix .htaccess deletion issue
255 -
256 - 2.1.2 2017/09/17 Fix issue with not handled taxonomies #123
257 -
258 - 2.1.1 2017/09/16 Fix issue for users with small innodb page size #121
259 -
260 - 2.1.0 2017/09/15 Refactor code
261 - Implement content tags for partly restriction like UAMPPE #84
262 - Add default user groups
263 - Add time based access
264 - Add dynamic user groups #64
265 - Implement caching #75
266 - Allow html as no access content #63 #93
267 - Optimize settings screen #61
268 - Support of partial download #118
269 - Add option to toggle visibility of assigned groups text next to the edit link #111
270 - Fix incorrectly retrieving of an ID for attachments/media #116
271 -
272 - 2.0.13 2017/07/26 Add ipv6 support - Fix issue #97
273 - Change "Hide Comments" logic - Fix issue #100
274 - Fix rewrite base issue - Fix issue #107 and #103
275 - Fix vsprintf warning - Fix issue #105
276 - Fix Relevanssi compatibility issue
277 - Fix missing feature picture if file locking is disabled
278 -
279 - 2.0.12 2017/06/16 Fix media file group issue #74
280 - Fix broken file includes / excludes
281 - Fix WordPress filter issue
282 - Fix access to own post #95
283 -
284 - 2.0.11 2017/05/18 Fix FrontendController::postsPreQuery() expected to be a reference, value given error
285 -
286 - 2.0.10 2017/05/17 Fix issue of not saved groups #74
287 - Adjust password lost link #79
288 - Improve attachment access checks #78
289 - Fix not working redirect
290 -
291 - 2.0.9 2017/05/13 Improve security #76
292 -
293 - 2.0.8 2017/05/08 Fix missing rss feed if protection is disabled #68
294 -
295 - 2.0.7 2017/05/07 Fix category tree issues #59
296 - Fix mysql database errors on strict mode #60
297 - Fix possible path issue
298 - Remove settings for post_format post type (which is used for internal propose)
299 - Fix wrong database update prompt
300 - Fix issue with asgaros from #66
301 -
302 - 2.0.6 2017/04/28 Improve http error codes #24
303 - Fix wrong url on Windows servers #53
304 - Fix missing install routine #51
305 -
306 - 2.0.5 2017/04/27 Fix switch_to_blog issue
307 - Fix file handling issues
308 -
309 - 2.0.4 2017/04/26 Adjust code so that php version is checked before throwing a fatal error
310 - Improve login form #26
311 - Fix soliloquy slider incompatibility #31
312 - Improve performance #41
313 -
314 62 2.0.3 2017/04/25 Fix compatibility issue with CMS Tree Page View plugin #37
315 63 Fix compatibility issue with SEO Redirection plugin #38
316 64 Fix Error thrown: Class 'WP_Site_Query' not found issue #36
317 65
@@ -354,13 +102,13 @@
354 102 Refactor config handling.
355 103 Fix Yoast SEO Plugin issue.
356 104 Some other small fixes.
357 105
358 - 1.2.7.4 2016/12/08 Fix some issues related to WordPress 4.7
106 + 1.2.7.4 2016/12/08 Fix some issues related to Wordpress 4.7
359 107
360 108 1.2.7.3 2016/12/08 Fix empty category issue.
361 109
362 - 1.2.7.2 2016/12/07 Hot fix for WordPress 4.7
110 + 1.2.7.2 2016/12/07 Hot fix for Wordpress 4.7
363 111
364 112 1.2.7.1 2016/12/04 Remove deprecated function get_currentuserinfo
365 113
366 114 1.2.7.0 2016/11/30 Add experimental nginx support
@@ -409,9 +157,9 @@
409 157
410 158 1.2.4.1 2013/05/06 Fix broken images issue.
411 159 Fix duplicated key issue.
412 160 Filter file types.
413 - Use WordPress mime types instead of the config array.
161 + Use wordpress mime types instead of the config array.
414 162
415 163 1.2.4 2013/05/01 Fix add column issue.
416 164 Fix install bug.
417 165 Fix error if no user is logged in. Thanks to Robert Egger and akiko.pusu.
@@ -449,9 +197,9 @@
449 197 Improve network activation/update
450 198 Add hooks for login bar
451 199 Prepare for NextGEN Gallery extension
452 200
453 - 1.1.1.2 2010/09/29 Fix bug that an usergroup for a user wasn't saved
201 + 1.1.1.2 2010/09/29 Fix bug that a usergroup for a user wasn't saved
454 202
455 203 1.1.1.1 2010/09/29 Fix T_DNUMBER bug
456 204
457 205 1.1.1 2010/09/29 Fix custom menu bug
@@ -461,9 +209,9 @@
461 209
462 210 1.1 2010/09/28 Add plugin api
463 211 Optimized code
464 212 Improve content filtering
465 - Fix bug that user groups can't be removed from element
213 + Fix bug that user groups can't removed from element
466 214 Fix empty category bug
467 215 Fix pre/next post bug
468 216 Fix login form bug
469 217 Fix redirect bug
@@ -489,11 +237,11 @@
489 237
490 238 1.0 Beta 2010/07/09 Complete rewrite
491 239 Some new options to improve the functions
492 240
493 - 0.9.1.4 2010/06/23 Hotfix for WordPress 3.0
241 + 0.9.1.4 2010/06/23 Hotfix for Wordpress 3.0
494 242
495 - 0.9.1.3 2009/07/17 Fix "header already send"-Problem with WordPress 2.8.1
243 + 0.9.1.3 2009/07/17 Fix "header already send"-Problem with Wordpress 2.8.1
496 244 Add option to set level with full access
497 245
498 246 0.9.1.2 2009/03/29 Fix some path problems
499 247 Add a reset function
@@ -530,9 +278,9 @@
530 278 Add language support
531 279
532 280 0.7 Beta 2009/01/05 Fix: Problems with media at posts
533 281 Fix: Many other small fixes
534 - Only support up to WordPress 2.7
282 + Only support up to Wordpress 2.7
535 283 Better integration
536 284
537 285 0.62 2008/12/18 Fix: Fatal error: Only variables can
538 286 be passed by reference. Thanks to David Thompson
@@ -543,12 +291,12 @@
543 291
544 292
545 293 == Frequently Asked Questions ==
546 294
547 -See: [https://github.com/GM-Alex/user-access-manager/wiki/FAQ](https://github.com/GM-Alex/user-access-manager/wiki/FAQ)
295 +See: https://github.com/GM-Alex/user-access-manager/wiki/FAQ
548 296
549 297 == Screenshots ==
550 298
551 -1. The group manager.
299 +1. The group manger.
552 300 2. The setting screen
553 301 3. The setup screen.
554 302 4. Integration into post overview.