Vladimir Garagulya

Hi Andy,
Every custom post type (CPT) has capability type, ‘post’ by default. If do not change capability type during CPT definition to something unique, like ‘board_post’, such CPT will be protected by the same set of capabilities (edit_posts, edit_publish_posts, etc.). So if you grant to a role the list of capabilities generated for the ‘post’ capability type, such role automatically receive access to alll CPTs which uses the same capability type ‘post’.

1. ‘read’ capability is required minimum to get access to the wp-admin/
2. There would be a conflict with some of active plugin. Try to deactivate all plugins and make new tests. Then activate plugins back one be one.
3. There is no known bug in the latest version of URE.
   

URE protects users with administrator role from others by default. You can switch this befor call of get_users() and restore back using code below as a starting point:

// Switch off URE’s protection of users with ‘administrator’ role from each other and other users with ‘edit_users’ capability

add_filter( ‘ure_supress_administrators_protection’, ‘switch_off_ure_admin_protection’, 10, 1);

function switch_off_ure_admin_protection( $switch_off ) {

$switch_off = true;

return $switch_off;

}

@simfabuser, contact me directly via support email address.

Hi,

1st, you should use a new custom role for this purpose, not WordPress default ‘administrator’ one.

You may try revoke from such role the ‘view_woocommerce_reports’ user capability, which protects ‘WooCommerce->Reports’ and ‘Analytics’ menu items.

Pay attention that if user can install plugins, he can receive superadmin access executing special PHP code at your web server. There is no sense to restrict his access to WordPress admin menu in this case. So finally, you have to reduce such user permissions prohibiting access not to the sales reports only.

User Role Editor doesn’t include redirect after login option.
Look at the “LoginWP” plugin, which free version allows this:
https://wordpress.org/plugins/peters-login-redirect/

User Role Editor does not delete any database table. When you delete plugin URE via ‘Delete’ link under its row in the plugins list at the “Plugins” page URE deletes records it added to the wp_options database table. That’s it.

There is no wp_capabilities table between database tables which belong to WordPress. If you search/write about data where WordPress stores user roles it is the record in the wp_options database table. Pay attention that ‘wp_’ here is the WordPress database prefix set in wp-config.php.

If you have another database prefix, e.g. ‘cs123_’, record with user roles will have option_name field value set to ‘cs123_user_roles’. More information here: https://shinephp.com/how-to-change-wordpress-user-role-capabilities/

If you write about selected user (ID=NN) permissions, it is the database record inside wp_usermeta database table, which you can find this way:

SELECT * FROM wp_usermeta WHERE user_id=NN AND meta_key=’wp_capabilities’;

And ‘wp_’ inside command above is the database prefix again which can be different.