Community Forum

Hi, thank you so much, the issue is now resolved, as users can no longer access files meant for others. They receive a message stating, “You are not authorized to view this page.”

• You did not properly configured the permissions. For instance, in Settings > WP Customer Area > Capabilities, you checked the box “view any private files” for the subscriber role, which is meant to allow access to any private content from the database for a given role. This should not be checked, except for an administrator, or a role meant to manage any private content from this post type.

However, this is still not the final outcome we’re aiming for, so I’ll do my best to explain it more clearly:

Issue: When creating a new test user with no assigned files and logging in, the user can see all recent files in the dashboard, even those not assigned to them (screenshot – dashboard shows files but I am not assigned any.png). While they can’t access the files, which is OK, it could still create confusion if we had many users. For example, if we had 100 users, each with their own file and page, a user would still see all 100 files listed in the dashboard, even though only 2 are accessible to them.

Solution I’m seeking:
a) I would like the dashboard to show only the files and pages relevant to each user under “Recent Files” and “Recent Pages.”
OR
b) I would like to disable the dashboard completely, leaving only the “Files” and “Pages” section, which correctly displays content specific to that user.

Our situation: We are a logistics company = only admin can create and upload files or pages. Customers/subscribers are not allowed to upload or edit any files or pages.

 

Appreciate your help!

Andrea