As a post author, I should be able to decide if an unauthorized user is shown a login screen or a 404.

washingtonstateuniversity / WSUWP-Content-Visibility

Control the visibility of content for groups of authenticated users.

Other

1 stars 0 forks source link

As a post author, I should be able to decide if an unauthorized user is shown a login screen or a 404. #4

Closed jeremyfelt closed 8 years ago

jeremyfelt commented 8 years ago

By default, WordPress will show a Page not found if a user does not have authorization to view a private post. This is a nice default because it may be that no information should leak about the page to the non authenticated viewer, including the URL.

It should be possible to select an option to have users directed toward a login page. Through another WSU plugin, we can ensure that logged in users are added as at least subscribers to the site so that we can further check their permissions.

jeremyfelt commented 8 years ago

Actually....

If a user arrives on a protected page and does not have access, they are redirected to the login screen.
Unless they are already logged in and do not have access, then they are redirected to the home page.