[David Thompson]

I have set all the role capabilities per numerous posts from you on this forum. I have set all the folder permissions on my GoDaddy host server short of granting “world” write permissions.

Nothing I have tried gets me past the error in the media library when I try to upload photos. I have the Form and Link plugins installed and everything else working fine. When I log in and edit my profile in the front end, I click the “Add media” button on the Bio panel and I can insert an existing photo from the media library, but I can not upload a new photo.

I get this message: “You don’t have permission to attach files to this post.”

Any words of wisdom on this? It’s driving me crazy.

Thank you! I will gladly grant you admin privileges to drop in and check it out if that will help.

[Steven Zahm]

@ David

I only just permitted that button to be shown to admin… looks like I’ll have to turn it back off as I would not expect that you would have permission to upload a new image from here (although it does work for me).

But for some clarification… it works fine in the admin on the WP Media Library page, correct? Meaning you can upload images on the Media Library admin page.

Can you please share screenshots of when you are receiving the error?

[David Thompson]

This reply has been marked as private.

[Steven Zahm]

@ David

I see the error, but from which screen is the Media Manager being opened from? I need more details on how you are getting there…

That said…

This button is enabled (and meant) for admins only, this is the only role that has the unfiltered_html role capability by default. I have not tested scenarios where user roles other than admin can have use the Media Library. I’m guessing you enabled this capability for roles other than the admin. Is that correct? If you did, I very highly recommend that you remove that capability because it opens up the possibility for users to do some very, very bad things really easily because this also bypasses many of the security safeguards that WP has in place.

[David Thompson]

This reply has been marked as private.

[Steven Zahm]

@ David

If you grive me a temp WP subscriber user account and a temp WP admin account, I’ll take a look. But so far from what you have described the bug is that the subscriber is seeing the Add Media button and are able to use (almost)… this is something a subscriber should definitely not be able to do. The subscriber should only be able to upload a photo and logo.

[David Thompson]

This reply has been marked as private.

[Steven Zahm]

@ David

What’s the login URL? The temp admin account can be posted here as a private reply or using the contact link at the very bottom of the page. I prefer the former over the later as it makes it easy to keep all issue related information together.

[Author]

Posts