[Hidden-tech] Best CMS for custom user permissions

swills beyond-print.com swills at beyond-print.com
Fri Nov 13 08:24:22 EST 2015


I've primarily used Drupal to implement this sort of thing.  Content "nodes" are
collected on forms that implement the title, body, and assorted application
specific "special stuff."  Views return a list based on the user (viewer's)
roles.  You outlined that pretty well in your question, which prompts me to
query if you really meant to ask; how can I implement the same kind of
arrangement in WordPress? Is that the question you need answered or are you
really looking for a CMS comparison discussion?

StephenGWills

> On November 12, 2015 at 7:03 PM Greg Perham <glp at gregperham.com> wrote:
> 
> 
> 
> 
> 
> WordPress vs. Drupal vs. other question for you all:
> 
> I'd like to know, in a general sort of way, how you would go about configuring
> your CMS of choice for this scenario. Is the CMS built in a way that easily
> facilitates this? What are the broad-stroke steps you would perform to set it
> up?
> 
> Guests (visitors not logged in):
> - cannot read Staff Blog
> - cannot read Staff Calendar events
> - can read public Community Calendar events
> - cannot read private Community Calendar events
> 
> Community:
> - cannot read Staff Blog
> - cannot read Staff Calendar events
> - can read public Community Calendar events
> - can read private Community Calendar events
> 
> Staff:
> - can read Staff Blog
> - cannot create Staff Blog posts
> - can create Staff Calendar events
> - can read all Community events
> - can create Community events
> 
> Staff Contributor:
> - can read everything
> - can create Staff Blog posts and all event types
> - cannot edit Pages, etc
> 
> - Staff Blog not included in any RSS feeds or sitemap
> - private Community events not included in any RSS feeds or sitemap
> 
> WordPress does have User Roles and a permissions system. The most straight
> forward solution would be to create custom Roles and permissions and then hide
> posts/events from being displayed, but that doesn't block them from feeds and
> can lead to situations where you're expecting 10 blog posts on a page and only
> get 8 because 2 of those queried were skipped from display; it doesn't work on
> a category-wide level, and certainly doesn't have any affect on creating
> posts. I think you'd have to do some intricate work with `pre_get_posts` and
> (forthcoming) taxonomy meta to truly block posts everywhere, and create a
> front-end content creation interface to have the best control over that
> aspect. In all, quite clunky and labor-intensive.
> 
> I wrote a plugin that will do a much simplified version of this for WP's
> built-in post categories using `current_user_can('read_private_posts')`, but
> it falls far short of the requirements above.
> 
> So, do other CMSes have an integrated system for this sort of thing, where you
> can control content visibility/editability/creation by content type and
> taxonomy? I've been told one of the major selling points of Drupal is the
> permissions system. Am I overlooking a scheme for an elegant solution in WP?
> 
> And…go! :)
> 
> Regards,
> Greg
> 
> 
> _______________________________________________
> Hidden-discuss mailing list - home page: http://www.hidden-tech.net
> Hidden-discuss at lists.hidden-tech.net
> 
> You are receiving this because you are on the Hidden-Tech Discussion list.
> If you would like to change your list preferences, Go to the Members   
> page on the Hidden Tech Web site.
> http://www.hidden-tech.net/members


Google

More information about the Hidden-discuss mailing list