Skip to:
Content
Pages
Categories
Search
Top
Bottom

How to Prevent Non-Admin Access to Account Settings Page?

  • Avatar of pantone
    pantone
    Participant

    @pantone

    I currently have Extended Profiles disabled, but I have Account Settings enabled. I’ve been testing different WordPress roles on my site and discovered that if a subscriber types in their browser: “domain.com/members/anothersubscriber” (where “anothersubscriber” = another member on the site that is also a subscriber), they receive an error (404) page. Obviously this happens because non-admins are not allowed to have this type of access. However, instead of throwing a 404 page, how can I have their (note: “their” meaning non-admins. in my case, subscribers) request redirect to the homepage or to their own profile page?

Viewing 1 replies (of 1 total)
  • Avatar of pantone
    pantone
    Participant

    @pantone

    To give an update:

    When I uncheck the option in the Components tab, “Allow your users to modify their account and notification settings directly from within their profiles,” the account settings page “domain.com/members/user” returns a 404 error page. Therefore, no users at all are able to have access to the Account Settings page. Solves the issue, but not really the most ideal solution.

    I’d prefer for users to be able to have access to their own Account Settings page, therefore I’d like to keep this option on.

    How is everyone else setting up their Account Settings page? and is anyone else running into the same dilemma?

Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.