[Hidden-tech] Best CMS for custom user permissions

[Terran Birrell]

Hi Greg,

I think adding WordPress custom post types to the mix might get you closer
to what you're looking to do than trying to base ir off of categories. This
is based off of only a cursory google search, but this might be helpful:
http://3.7designs.co/blog/2014/08/restricting-access-to-custom-post-types-using-roles-in-wordpress/

Another option could be a multisite install with the "staff" blog behind a
log in, then you could use all the same plugins, but in a mirror site that
restricts the whole site rather than restricting certain content.

Hope that helps!
Terran

On Thu, Nov 12, 2015 at 7:03 PM, Greg Perham <glp at gregperham.com> wrote:

>
>
>
>
> *WordPress vs. Drupal vs. other* question for you all:
>
> I'd like to know, in a general sort of way, how you would go about
> configuring your CMS of choice for this scenario. Is the CMS built in a way
> that easily facilitates this? What are the broad-stroke steps you would
> perform to set it up?
>
> Guests (visitors not logged in):
> - cannot read Staff Blog
> - cannot read Staff Calendar events
> - can read *public* Community Calendar events
> - cannot read *private* Community Calendar events
>
> Community:
> - cannot read Staff Blog
> - cannot read Staff Calendar events
> - can read *public* Community Calendar events
> - can read *private* Community Calendar events
>
> Staff:
> - can read Staff Blog
> - cannot create Staff Blog posts
> - can create Staff Calendar events
> - can read all Community events
> - can create Community events
>
> Staff Contributor:
> - can read everything
> - can create Staff Blog posts and all event types
> - cannot edit Pages, etc
>
> - Staff Blog not included in any RSS feeds or sitemap
> - *private* Community events not included in any RSS feeds or sitemap
>
> WordPress does have User Roles and a permissions system. The most straight
> forward solution would be to create custom Roles and permissions and then
> hide posts/events from being displayed, but that doesn't block them from
> feeds and can lead to situations where you're expecting 10 blog posts on a
> page and only get 8 because 2 of those queried were skipped from display;
> it doesn't work on a category-wide level, and certainly doesn't have any
> affect on creating posts. I think you'd have to do some intricate work with
> `pre_get_posts` and (forthcoming) taxonomy meta to truly block posts
> everywhere, and create a front-end content creation interface to have the
> best control over that aspect. In all, quite clunky and labor-intensive.
>
> I wrote a plugin that will do a much simplified version of this for WP's
> built-in post categories using `current_user_can('read_private_posts')`,
> but it falls far short of the requirements above.
>
> So, do other CMSes have an integrated system for this sort of thing, where
> you can control content visibility/editability/creation by content type
> *and* taxonomy? I've been told one of the major selling points of Drupal
> is the permissions system. Am I overlooking a scheme for an elegant
> solution in WP?
>
> And…go! :)
>
> Regards,
> Greg
>
>
>
> _______________________________________________
> Hidden-discuss mailing list - home page: http://www.hidden-tech.net
> Hidden-discuss at lists.hidden-tech.net
>
> You are receiving this because you are on the Hidden-Tech Discussion list.
> If you would like to change your list preferences, Go to the Members
> page on the Hidden Tech Web site.
> http://www.hidden-tech.net/members
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20151113/d9c76b9b/attachment.html