Capability Manager Enhanced

• 08 Dec 2022 =
  • Update : Allow users to block some roles from "User Testing", #621
  • Update : Allow admins to test users from the user profile page, #626
  • Fixed : Block URL not working, #629
  • Update : Block change of user level for Administrators, #628
  • Update : UI Consistency: vertical alignment of Usage Keys, Roles screen search box, #617
  • Fixed : Unexpected placeholder %1 warning, #624
  • Update : Change "PublishPress" to "PublishPress Planner" in Capabiliites, #638
  • Update : FREE Capabilities ES-FR-IT Translation Updates October 27, #620

• 25 Oct 2022 =
  • Added : Add a way for admins to test user accounts #57
  • Fixed : Multi-select JS fails to load on Profile Edit Screen #576
  • Update : Adding an explanation for Checkmark / empty / X #578
  • Update : Add text description to Settings #573
  • Fixed : Plugin translation ignores user's language setting #580
  • Fixed : Illegal string offset 'administrator' & Array to string conversion Warning #589
  • Update : Support for the "Templates" metabox #251
  • Fixed : Some CPT is missing from Editor Features #582
  • Update : Capabilities-FR-IT-TranslationUpdate-September2022 #577

• 04 Oct 2022 =
  • Update : Changes to Import/Export encoding method

• 13 Sep 2022 =
  • Added : Ability to block user login by role #510
  • Update : Add disable WooCommerce admin restrictions in role settings #549
  • Update : Hide taxonomy screen option for editor features #554
  • Update : Hide metabox screen option for editor features #556
  • Fixed : It's possible to access customize page even after blocking with admin menu #559
  • Fixed : Uncaught error: Illegal offset type in isset or empty #564
  • Update : Translation Note Suggestion for "Editor" #567
  • Update : Capability-FR-IT-Translation_updates-August15_2022 #551

• 11 Aug 2022 =
  • Update : Admin Features UI design consistency #466
  • Fixed : Support WordPress API for Editor features Classic Editor disable / enable #531
  • Fixed : Woocommerce order metabox Illegal offset type in isset or empty warning #538
  • Added : Added woocommerce coupon description to editor features #299
  • Update : ES-FR-IT-Capability-Translations-Update-August2022 #540

• 02 Aug 2022 =
  • Added : Add "list" capabilities to display #206
  • Added : Add a Settings screen to Free version #520
  • Added : Add settings to allow users to select multiple roles when creating users #462
  • Fixed : Multiple role when creating user doesnt work #515
  • Fixed : Admin Menus issue with Yoast #493
  • Fixed : It's possible to get lockout of admin menus when all items are checked #527
  • Update : Limit "Control Custom Statuses" option to settings screens alone #528
  • Update : French and Italian Translations updates #524
  • Fixed : PHP Warning on viewing Admin Menus #525

• 12 Jul 2022 =
  • Fixed : Capabilities conflict with Advanced Custom Fields #494
  • Fixed : Issue with editor features when options is not array #495
  • Update : Add checkbox for the "Allowed Editors" feature #498
  • Update : Add support for TaxoPress on the Capabilities screen #500
  • Update : Use 3 clicks approach for all boxes in Capabilities #497
  • Fixed : Uncaught TypeError: in_array(): Argument #2 ($haystack) must be of type array, null given. #513
  • Fixed : Hide Invalid Capabilities if empty #490

• 09 May 2022 =
  • Fixed : Small bug with Capabilities search #340
  • Update : Add sorting for more table columns in "Roles" #388
  • Fixed : Edit Role screen: Right sidebar links to Capabilities screen without role argument #407
  • Fixed : Admin Features issue with JetPack #412
  • Update : Stop Free and Pro from being enabled together #323
  • Update : Add PublishPress Building Package for Capabilities #400

• 14 Jun 2022 =
  • Fixed : Correct match of post types and Editor Features boxes #427
  • Update : Changes to user role selection UI and make role draggable for re-ordering #443
  • Added : Two new role tabs (Redirects and Editing) #403
  • Added : Redirect users to original page after login to role editor #301
  • Added : Redirect on login and logout to role editor #11
  • Fixed : Admin Menus issue with JetPack #381
  • Added : Hide the "add new block" button to editor feature #436
  • Added : Hide the Revisions box in Editor Features #428
  • Update : UI clean up for Backup screens #322
  • Update : Move the Taxonomy area to it's own tab #425
  • Added : Support for WPML capabilities #411
  • Added : Support for WS Form #305
  • Added : Support Gravity Forms support #306
  • Added : Add a new setting to disable Code Editor in Posts to role editor #298
  • Update : Remember last tab after updating role settings #445
  • Update : Add toggle all checkmarks options on the Capabilities screen #419
  • Update : More categorization for capabilities #303
  • Update : Force user roles to use specific editors in role settings #276
  • Added : Add a setting to show private taxonomies on the "Capabilities" screen #314
  • Added: Extend admin features "hide by css" to include plugin list #488

• 28 Apr 2022 =
  • Fixed : Post title not working with editor features #370
  • Fixed : Issue with revision metabox and some plugin metabox in Editor features. #369
  • Fixed : Editor Features compability with taxonomies created by the "Toolset" plugin. #367
  • Fixed : Backup Features text missing some "s" #365
  • Update : Change import upload file delete to use WordPress function #364
  • Update : Make sure "Copy" feature for roles works with Editor Features and more #362
  • Update : Add short description for "Role Level" #361
  • Update : Make "Roles" into the top menu link #326
  • Update : Vertical tabs similar to the "Capabilities" for Editor Features #257
  • Fixed : Can't hide the "Profile" link with "Admin Menus" #337
  • Update : More Columns on Roles Screen #181

• 14 Apr 2022 =
  • Fixed : Non-administrators cannot access profile screen
  • Compat : WooCommerce - Shop Managers could not access Users
  • Compat : WooCommerce - Editor Feature restrictions did not hide Product Categories, Tags in Classic Editor

• 13 Apr 2022 =
  • Feature : Export / Import for new features
  • Change : Clarify captions on Roles, Backup screens
  • Fixed : Multisite: Don't apply Feature Restrictions to Super Administrators unless constant PP_CAPABILITIES_RESTRICT_SUPER_ADMIN is defined
  • Fixed : Capabilities could not be updated if third party code executes too early. Now support constant PP_CAPABILITIES_COMPAT_MODE to work around conflicts.
  • Fixed : Coding standards - WordPress VIP scan compliance improvements
  • Compat : LoginWP - custom redirect failed
  • Lang : New French, Italian and Spanish translations

• 26 Jan 2022 =
  • Compat : WordPress 5.9 - failure adding / editing posts under some Editor Features configurations (work around WP hooking late-defined function disable_block_editor_fornavigation_post_type)

• 13 Jan 2022 =
  • Fixed : Capability names with dashes could not be added
  • Fixed : After role rename, title in dropdown does not refresh
  • Fixed : Input sanitization consistency
  • Fixed : Escape output variables
  • Lang : Spanish, French, Italian

• 8 Dec 2021 =
  • Feature : Filter Capabilities display by post type or text entry
  • Feature : Editor Features - Restrict editor elements for custom post types
  • Feature : Admin Features - Restrict Admin Bar or individual Admin Bar elements
  • Feature : Admin Features - More items available for restriction #240
  • Change : Admin Features - Captions use dashes, not numbers #229
  • Change : Capabilities screen - Tab for PublishPress Capabilities #220
  • Fixed : CSRF vulnerability

• 8 Dec 2021 =
  • Fixed : Security issue

• 8 Dec 2021 =
  • Fixed : Security issue

• 8 Dec 2021 =
  • Fixed : Security issue

Fixed : Security issue. Please update.

=

• 28 Oct 2021 =
  • Change : Role Capabilities screen uses tabs
  • Feature : New "Admin Features" screen #200

• 26 Aug 2021 =
  • Feature : Retain last role selection for Capabilities, Editor Features screens
  • Perf : Sync role to all sites - Operation timed out on networks with ~100 sites
  • Fixed : Some security scans flagged an unused file in external library "chosen". That file (and other developer documentation files) has been removed

• 24 Jun 2021 =
  • Feature : Editor Features restriction (new screen to block editor elements per-role)
  • Fixed : If Media "Create" capability is selected / unselected by clicking Media caption or Create caption, the corresponding upload_files checkbox (in Other WP Core Capabilities section) is not toggled, leading to an apparant update failure
  • Fixed : If Media "Create" capability is negated or un-negated, the corresponding upload_files checkbox (in Other WP Core Capabilities section) is not toggled, leading to an apparant update failure
  • Fixed : PHP Warning if a role is stored without a valid capabilities array

• 6 May 2021 =
  • Feature : Multisite - "sync options to all sites" checkbox. Copies "use create_posts capability", Type-Specific Capabilities, Taxonomy-Specific Capabilities, Detailed Taxonomy Capabilities settings
  • Fixed : Multisite - "sync role to all sites" did not work if main site ID is not 1
  • Fixed : Fatal error on Capabilities screen if another plugin calls get_editable_roles() too early
  • Fixed : Add New User - couldn't display password entry
  • Compat : PublishPress - Authors without publish capability could directly publish on the Calendar screen
  • Change : Permissions - Hide / Unhide Role setting moved to Roles screen row actions

• 18 Feb 2020 =
  • Feature : Roles screen
  • Feature : Multiple role assignment on Add / Edit User screen
  • Lang : Fixed handling, activated partial translations in German, Italian, Russian, Spanish, Swedish, Belarusian, Catalan
  • Change : Capabilities screen - move role selector to top left, eliminate load button
  • Change : Capabilities screen - move some sidebar items to Settings screen
  • Change : Adjust some captions, variable names, more selective code execution
  • Compat : bbPress - Forum, Topic and Reply capabilities were not displayed in Editing Capabilities grid
  • Fixed : uneditable bbPress roles could be opened for editing (require Capabilities Pro)
  • Fixed : Invalid Capabilities - Brief explanatory caption; avoid false positives for post types with map_meta_cap disabled
  • Fixed : PHP warning for invalid foreach argument, on sites with no active_plugins option stored
  • Fixed : Backup > Restore - Negated capabilities were not displayed correctly in restore preview
  • Fixed : Backup > Restore - Clicking label for Initial Backup jumped selection to Last Manual Backup
  • Change : Backup > Restore - Preview displays "No changes" below role name where appropriate

• 8 Oct 2020 =
  • Fixed : Type-Specific Capabilities options included some non-public WordPress post types that don't support capability customization
  • Fixed : Review of role backup contents does not show name of current roles which would be removed by restoring backup

• 1 Oct 2020 =
  • Feature : Improved design and styling for Backup and Restore
  • Feature : Backup > Restore - filter to display only modified capabilities
  • Compat : Advanced Gutenberg - include AG Profile capabilities in Editing, Deletion, Reading capabilities grid
  • Fixed : Media Create / upload_files capability could not be removed from role
  • Fixed : Multisite - Incorrect menu display on sites where main site ID is not 1
  • Fixed : Language file load failure if plugin directory structure is non-standard

• 16 Jun 2020 =
  • Fixed : Fatal error due to missing vendor library folder

• 1 Jun 2020 =
  • Fixed : PublishPress Permissions - Type / Taxonomy settings incorrectly synchronized under some conditions

• 13 May 2020 =
  • Compat : PublishPress Permissions - "Type-Specific Capabilities" setting was not properly synchronized with Permissions > Settings > Core > Filtered Post Types

• 23 Apr 2020 =
  • Change : Add New Role retains capitalization as entered for role title (otherwise applies proper case)
  • Feature : Rename Role sidebar box on Capabilities screen
  • Fixed : Fatal error on plugin load if Administrator role does not exist

• 6 Apr 2020 =
  • Fixed : Fatal error loading Capabilities screen on a small percentage of installations
  • Compat : PublishPress Permissions - Post Type selections for "Type-Specific Capabilities" were not synchronized with PublishPress Permissions under some conditions

• 2 Apr 2020 =
  • Fixed : Fatal error loading Capabilities screen on a small percentage of installations
  • Fixed : Capabilities menu was displayed to non-Administrators with no items except "Upgrade to Pro"

• 17 Mar 2020 =
  • Fixed : Capabilities screen was not accessible to non-Administrators who have "manage_capabilities" capability
  • Fixed : Some functions were not accessible to network Super Administrators without a role on the site
  • Change : Clarify some messages for plugin access denial

• 16 Mar 2020 =
  • Feature : Auto-backup role and capabilities on each update (and on update to this version)
  • Fixed : First-time installation: Capabilities menu item not displayed until after Plugins or Users menu clicked
  • Change : Third Party Plugin Capabilities - always display checkboxes even if capabilities not present in Administrator role
  • Fixed : Plugin capability sections - pp_set_notification_channel and pp_manage_roles were included in both PublishPress and PublishPress Permissions sections
  • Fixed : Capability Negation (Denial) bulk unselect link was ambiguous due to missing strikethrough

• 9 Jan 2020 =
  • Change : Renamed to PublishPress Capabilities
  • Feature : Capabilities link on PublishPress > Roles row opens Role Capabilities screen
  • Feature : Role Capabilities screen links to PublishPress > Roles for member management
  • Fixed : Browser reload caused Role Capabilities screen to display default role
  • Fixed : Add Capability sidebar added custom capability to role immediately, but capability checkbox did not display as checked until reload
    
  • Fixed : Category Assign or Delete capabilities were not effective due to WordPress core forcing default capability requirement
  • Fixed : Term Assign or Delete capabilities were not effective due to WordPress core forcing default capability requirement
  • Fixed : Multisite - On sub-sites, Role Capabilities screen did not display PublishPress Capabilities section to Super Administrators who don't have a role on the site
  • Fixed : Role name captions on Role Capabilities and Backup Tool screens could not be translated
  • Fixed : Checkbox bulk selection on Role Capabilities screen was incorrect under some conditions
  • Change : Reinstate WordPress edit_published_posts workaround with correct status filtering behavior
  • Change : Apply workaround filters for WordPress edit_published_posts / publish_posts handling only for users who have edit_published_posts capability for current post type

• 25 Oct 2019 =
  • Fixed : Automatic publication of blank auto-drafts, WooCommerce posts save with incorrect post status (since 1.8)

• 24 May 2019 =
  • Fixed : Users' inclusion or non-inclusion in Authors dropdown was not updated based on role edit (non-zero level setting)

• 1 May 2019 =
  • Fixed : On some sites, capabilities added dynamically by other code were forced into stored role definition (and could not be removed).
  • Fixed : Negative role capabilities could not be directly unset (had to be checked, saved, then unchecked).

• 9 Apr 2019

• 3 Apr 2019

• 29 Mar 2019

• 28 Mar 2019

• Feature : Prevent read capability from being removed from a standard role
  • Feature : If read capability is missing from a standard role, display warning and instant fix link
  • Feature : Additional save button at top of Roles and Capabilities screen!
  • Change : Reinstate Press Permit description link
    
  • Change : Thickbox popups for related plugins

• Feature : WooCommerce - If current user has duplicate_products capability, make Woo honor it
  • Feature : Link to Backup Tool from sidebar of Roles and Capabilities screen
  • Feature : Link to Roles and Capabilities screen from Backup Tool
  • Change : Minor code cleanup and refactor
  • Change : Copyrights, onscreen link for PublishPress ownership
  • Change : Links to Related Permissions Plugins in sidebar on Roles and Capabilities screen

• Feature : Automatically save backup of WP roles on plugin activation or update
  • Feature : When roles are manually backed up, also retain initial role backup
  • Feature : Backup Tool can also display contents of role backups

• Fixed : Back button caused mismatching role dropdown selection
  • Compat : PHP 7.2 - warning for deprecated function if a second copy of CME is activated

• Fixed : Potential vulnerability in wp-admin (but exposure was only to users with role editing capability)

• Fixed : PHP warning for deprecated function WP_Roles::reinit
  • Change : Don't allow non-Administrator to edit Administrators, even if Administrator role level is set to 0

• Change : Revert menu captions to previous behavior ("Permissions > Role Capabilities" if Press Permit Core is active, otherwise "Users > Capabilities")

• Fixed : User editing was improperly blocked in some cases

• Fixed : Non-administrators' user editing capabilities were blocked if Press Permit Core was also active
  • Fixed : Non-administrators could not edit other users with their role (define constant CME_LEGACY_USER_EDIT_FILTER to retain previous behavior)
  • Fixed : Non-administrators could not assign their role to other users (define constant CME_LEGACY_USER_EDIT_FILTER to retain previous behavior)
  • Lang : Changed text domain for language pack conformance

• Fixed : On single-site installations, non-Administrators with delete_users capability could give new users an Administrator role (since 1.5.2)
  • Fixed : Deletion of a third party plugin role could cause users to be demoted to Subscriber inappropriately
  • Compat : Press Permit Core - Permission Group refresh was not triggered if Press Permit Core is inactive when CME deletes a role definition
  • Compat : Support third party display of available capabilities via capsman_get_capabilities or members_get_capabilities filter
  • Change : If user_level of Administrator role was cleared, non-Administrators with user editing capabilities could create/edit/delete Administrators. Administrator role is now implicitly treated as level 10.
  • Fixed : CSS caused formatting issues around wp-admin Update button on some installations
  • Perf : Don't output wp-admin CSS on non-CME screens
  • Lang : Fixed erroneous text_domain argument for numerous strings
  • Lang : Updated .pot and .po files

• Fixed : Network Super Administrators without an Administrator role on a particular site could not assign an Administrator role to other users of that site

• Fixed : Non-administrators with user editing capabilities could give new users a role with a higher level than their own (including Administrator)

• Fixed : Role capabilities were not updated / refreshed properly on multisite installations
  • Feature : If create_posts capabilities are defined, organize checkboxes into a column alongside edit_posts
  • Feature : "Use create_posts capability" checkbox in sidebar auto-defines create_posts capabilities (requires Press Permit)
  • Compat : bbPress + Press Permit - Modified bbPress role capabilities were not redisplayed following save, required reload
  • Compat : bbPress + Press Permit - Adding a capability via the "Add Cap" textbox caused the checkbox to be available but not selected
  • Compat : Press Permit - "supplemental only" option was always enabled for newly created and copied roles, regardless of checkbox setting near Create/Copy button

• Feature : Support negative capabilities (storage to wp_roles array with false value)
  • Feature : Multisite - Copy a role definition to all current sites on a network
  • Feature : Multisite - Copy a role definition to new (future) sites on a network
  • Feature : Backup / Restore tool requires "restore_roles" capability or super admin status
  • Fixed : Role reset to WP defaults did not work, caused a PHP error / white screen
  • Change : Clarified English captions on Backup Tool screen
  • Fixed : Term deletion capability was not included in taxonomies grid even if defined
  • Fixed : jQuery notices for deprecated methods on Edit Role screen
  • Compat : Press Permit - if a role is marked as hidden, also default it for use by PP Pro as a Pattern Role (when PP Collaborative Editing is activated and Advanced Settings enabled)
  • Change : Press Permit promotional message includes link to display further info

• Compat : bbPress + Press Permit - "Add Capability" form failed when used on a bbPress role, caused creation of an invalid role

• Perf : Eliminated unused framework code (reduced typical wp-admin memory usage by 0.6 MB)
  • Fixed : Failure to save capability changes, on some versions of PHP
  • Compat : Press Permit - PHP Warning on role save
  • Compat : Press Permit - PHP Warning on "Force Type-Specific Capabilities" settings update
  • Compat : Press Permit - "supplemental only" option stored redundant entries
  • Compat : Press Permit - green background around capabilities which
  • Compat : Press Permit - PHP Warning on "Force Type-Specific Capabilities" settings update
  • Maint : Stop using $GLOBALS superglobal
  • Change : Reduced download size by moving screenshots to assets folder of project folder

• Compat : Press Permit - flagging of roles as "supplemental assignment only" was not saved

• Compat : bbPress 2.2 (supports customization of dynamic forum role capabilities)
  • Compat : Press Permit + bbPress - customized role capabilities were not properly maintained on bbPress activation / deactivation, in some scenarios
  • Fixed : Role update and copy failed if currently stored capability array is corrupted

• Fixed : Capabilities were needlessly re-saved on role load
  • Fixed : Capability labels in "Other WordPress" section did not toggle checkbox selection
  • Press Permit integration: If capability is granted by the role's Permit Group, highlight it as green with a descriptive caption title, but leave checkbox enabled for display/editing of role defintion setting (previous behavior caused capability to be stripped out of WP role definition under some PP configurations)

• Fixed : On translated sites, roles could not be edited
  • Fixed : Menu item change to "Role Capabilities" broke existing translations

• Fixed : Separate checkbox was displayed for cap->edit_published_posts even if it was defined to the be same as cap->edit_posts
  • Press Permit integration: automatically store a backup copy of each role's last saved capability set so they can be reinstated if necessary (currently for bbPress)

• Language: updated .pot file
  • Press Permit integration: roles can be marked for supplemental assignment only (and suppressed from WP role assignment dropdown, requires PP 1.0-beta1.4)

• https compatibility: use content_url(), plugins_url()
  • Press Permit integration: if role definitions are reset to WP defaults, also repopulate PP capabilities (pp_manage_settings, etc.)