search

MinnPost / minnpost-wordpress

MinnPost.com in WordPress
GNU General Public License v2.0
2 stars 0 forks source link

Content access #41

Closed jonathanstegall closed 6 years ago

jonathanstegall commented 6 years ago

We need to fix access to content based on member level.

jonathanstegall commented 6 years ago

We need to check, at least:

  1. content access for minnpost plus content (and also fix it in the admin when posts are added/edited, and also the icon overlay)
  2. admin pages/sections (I feel pretty good about this one, with AAM plugin) ✅
  3. user account pages for 1) the user the page belongs to, 2) user admins, 3) everyone else. ✅

I think if someone tries to access a page they can't, and we have control over it we should:

  1. If they are not logged in, send them to the login page with a message that the page requires an access level
  2. If they are logged in but do not have access:
    • if it is a member level thing, take them to an upgrade page
    • if it is an administrative thing, show them a more typical access denied page
jonathanstegall commented 6 years ago

I think it's possible the AAM plugin can help with this, but I need to check what hooks it has.

jonathanstegall commented 6 years ago

User account pages:

  1. Public (only one page) ✅
  2. Accessible to the user they belong to ✅
  3. Accessible to user admins ✅
  4. Access denied to other signed in users ✅
  5. Access denied to anonymous users ✅
jonathanstegall commented 6 years ago

Member content tests:

  1. Platinum user ✅
    • platinum content ✅
    • gold content ✅
    • mp+ content (silver and above) ✅
    • all member content ✅
    • all registered user content ✅
    • None ✅
    • default ✅
  2. Gold user
    • platinum content ✅
    • gold content ✅
    • mp+ content (silver and above) ✅
    • all member content ✅
    • all registered user content ✅
    • None ✅
    • default ✅
  3. Silver user
    • platinum content ✅
    • gold content ✅
    • mp+ content (silver and above) ✅
    • all member content ✅
    • all registered user content ✅
    • None ✅
    • default ✅
  4. Bronze user
    • platinum content ✅
    • gold content ✅
    • mp+ content (silver and above) ✅
    • all member content ✅
    • all registered user content ✅
    • None ✅
    • default ✅
  5. registered user
    • platinum content ✅
    • gold content ✅
    • mp+ content (silver and above) ✅
    • all member content ✅
    • all registered user content ✅
    • None ✅
    • default ✅
  6. Logged out user
    • platinum content ✅
    • gold content ✅
    • mp+ content (silver and above) ✅
    • all member content ✅
    • all registered user content ✅
    • None ✅
    • default ✅
jonathanstegall commented 6 years ago

This is all solid, I think.