Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

[Resolved] BP Simple Front End Post: Image upload issue for authors

Tagged: ,

  • Participant
    Level: Enlightened
    Posts: 79
    Leo on May 4, 2016 at 9:58 am #3741

    Hi guys,

    I am using BP Simple Front End Post to enable the members publish posts from the front end.
    They can create WP posts and custom post types, everything works perfect but for image uploading to the custom post type.
    users get such an error: You don’t have permission to attach files to this post.

    only admins can upload media to these posts.
    my users are all authors and they can upload media to general WP posts.

    can you please help me fix this?

    Thank you,
    Leo

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on May 4, 2016 at 5:08 pm #3747

    Hi Leo,
    I am sorry for the inconvenience.

    Can you please tell me which version of BP Simple Front End post plugin are you using?

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 79
    Leo on May 4, 2016 at 5:12 pm #3749

    Hi Brajesh,

    The version is 1.2.9.
    As a quick solution, I changed the user roles to Editor and they can upload now.I don’t know why, but it worked.

    Thanks,
    Leo

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on May 4, 2016 at 5:16 pm #3750

    Hi Leo,
    Thank you for the details. Seems some issue on our part.

    A user needs some capability “upload_files” to upload a file. Seems like some issue on our part. I will be looking at this and will update the plugin tomorrow. Assigning the user to higher role seems to have enabled the needed capabilities.

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 79
    Leo on May 10, 2016 at 2:40 pm #3804

    Hi Brajesh,

    Assigning my users an editor’s role is fine for me, however there’s another issue, now all users can see media uploaded by other users, which is normal for editors. I would like to just restrict this. I mean only showing media, the other capabilities are all right for me.

    Could you please help me with this, if there’s any option to do that?

    Thank you,
    Leo

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on May 11, 2016 at 5:11 pm #3821

    Hi Leo,
    The last post is the current behavior of the media model. we have it restricted to the current logged in user. I will check and update by tomorrow.

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 79
    Leo on May 15, 2016 at 1:10 pm #3883

    Hi Brajesh,

    Have you had the chance to check it?

    Yes, I have been checking on different forms, for the default form it shows the media uploaded by the logged in user only, regardless if it’s an author or editor.
    This happens only for the custom forms.

    Thanks,
    Leo

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on May 16, 2016 at 1:54 pm #3898

    Hi Leo,
    I will be looking at this issue in next 2-3 days. Currently, I have my hands full with our upcoming theme. Will update you then.

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 79
    Leo on June 15, 2016 at 4:15 pm #4244

    Hi Brajesh,

    can you please check this issue with capabilities and help me solve it somehow?

    Thanks,
    Leo

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on June 15, 2016 at 6:12 pm #4246

    Hi Leo,
    Checking tonight and will update you by the day tomorrow.

    Thank you
    Brajesh

The topic ‘ [Resolved] BP Simple Front End Post: Image upload issue for authors’ is closed to new replies.

This topic is: resolved