A user with role: -No role for this site- becomes Admin after signing up for a sub

[jacoswan]

Describe the bug

WordPress has various user roles, one of which is - No role for this site -. When that is set, if the user buys a Subscription product, their user role is changed to Adminstrator.

To Reproduce

1. Go to Users > All Users
2. Edit a random user and change their Role to - No role for this site -
3. Update user
4. On the front end, purchase a Subscription product (test with simple, $10/month sub) and complete checkout
5. After the order is complete, the user is now an Administrator

Expected behavior

When purchasing a non-subscription product, the role is left as is. So signing up for a subscription should either be the same as that, or at minimum switch the role to Subscriber, but certainly not Administrator.

Actual behavior

User role is switched to Administrator with all the trappings.

Product impact

• [x] Does this issue affect WooCommerce Subscriptions? yes
• [ ] Does this issue affect WooCommerce Payments? yes/no/tbc, add issue ref

Additional context

Stumbled upon while looking for default features with which to block an existing user from making purchases. While this ultimately didn't work, the outcome was concerning.

[james-allan]

Hi @jacoswan.

I haven't been able to replicate this issue. When I change one of my user's role to 'No role for this site'

and I make a subscription purchase, the user's role is set to "Subscriber" not administrator

Could you double check your WooCommerce > Settings > Subscriptions to make sure you haven't inadvertently set the subscriber role to "Administrator".

[jacoswan]

Hi @james-allan, thanks for checking.

How embarrassing for me, that's exactly the reason 🤦🏻‍♂️ I can't explain how that would have happened (and more importantly, why I didn't check that before opening this issue).

Sorry for wasting your time.