Skip to:
Content
Pages
Categories
Search
Top
Bottom

How to Prevent Non-Admin Access to Account Settings Page?

  • @pantone

    Participant

    12 years, 4 months ago

    I currently have Extended Profiles disabled, but I have Account Settings enabled. I’ve been testing different WordPress roles on my site and discovered that if a subscriber types in their browser: “domain.com/members/anothersubscriber” (where “anothersubscriber” = another member on the site that is also a subscriber), they receive an error (404) page. Obviously this happens because non-admins are not allowed to have this type of access. However, instead of throwing a 404 page, how can I have their (note: “their” meaning non-admins. in my case, subscribers) request redirect to the homepage or to their own profile page?

Viewing 1 replies (of 1 total)

  • @pantone

    Participant

    12 years, 4 months ago

    To give an update:

    When I uncheck the option in the Components tab, “Allow your users to modify their account and notification settings directly from within their profiles,” the account settings page “domain.com/members/user” returns a 404 error page. Therefore, no users at all are able to have access to the Account Settings page. Solves the issue, but not really the most ideal solution.

    I’d prefer for users to be able to have access to their own Account Settings page, therefore I’d like to keep this option on.

    How is everyone else setting up their Account Settings page? and is anyone else running into the same dilemma?

Viewing 1 replies (of 1 total)
  • The topic ‘How to Prevent Non-Admin Access to Account Settings Page?’ is closed to new replies.

Topic Info

Skip to toolbar