Timeline for Users with Subscriber role in Wordpress cannot see & access CiviCRM
Current License: CC BY-SA 4.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 25, 2019 at 12:40 | comment | added | Patrick | Ok, thanks again William | |
| Sep 25, 2019 at 9:14 | comment | added | William Mortada | In some sense it doesn't really matter which role you use as long as you set up the permissions correctly to give people the right level of access. However, it can be confusing for people if you go against convention and use a role for a purpose that it isn't really intended. For that reason I would suggest giving staff the 'administrator' or 'editor' roles or perhaps create a new role specifically for this purpose. | |
| Sep 24, 2019 at 14:17 | comment | added | Patrick | We are using WP just for CiviCRM, no other need. So anonymous visitors do not have access to CiviCRM. Only connected users have access to CiviCRM to edit contacts. WP's Subscriber role seemed to be the best option for this. If you have another solution.... | |
| Sep 23, 2019 at 15:22 | comment | added | William Mortada | I'm still not entirely clear what you are trying to achieve I'm afraid. Typically only staff would have access to the CiviCRM back-end and the menu. Visitors to the site wouldn't have any access to either. | |
| Sep 23, 2019 at 15:13 | comment | added | Patrick | Thank you William, I fully understand what you mean, but... this doesn't explain why I need to give the " "CiviCRM: access CiviCRM backend and API" to see CiviCRM menu. The problem will be the same with all other roles... According me, this is a weakness in the security of CiviCRM under WP. | |
| Sep 23, 2019 at 10:10 | comment | added | William Mortada | If you are using the role for staff I would be inclined to use one of the other WordPress roles that typically have greater access such as 'administrator' or 'editor'. Alternatively you could create a new role for this purpose. This page that explains roles and permissions may help: wordpress.org/support/article/roles-and-capabilities | |
| Sep 23, 2019 at 10:06 | comment | added | William Mortada | The 'subscriber' role in WordPress is typically used to allow people to sign up to receive information from a website. It doesn't normally give them permission to access any admin functions or the WordPress dashboard. Perhaps you are using this role in a different way but it sounds like an unusual set up. As it says in the manual the permission to access the CiviCRM back end should only be given to trusted roles and I wouldn't recommend giving it to anyone outside the staff team. | |
| Sep 23, 2019 at 9:37 | comment | added | Patrick | The subscriber should be able to do what a "normal user" can do in a NP organisation : create, modify, delete and use contacts. | |
| Sep 22, 2019 at 10:55 | comment | added | William Mortada | I wouldn't normally recommend giving subscribers this level of access to CiviCRM. What do you want subscribers to be be able to do on your site? You can find the documentation here: docs.civicrm.org/user/en/latest/initial-set-up/… | |
| Sep 20, 2019 at 15:05 | review | Late answers | |||
| Sep 22, 2019 at 10:56 | |||||
| Sep 20, 2019 at 14:47 | vote | accept | Patrick | ||
| Sep 20, 2019 at 14:47 | history | answered | Patrick | CC BY-SA 4.0 |