{"action":"created","issue":{"url":"https://api.github.com/repos/Yoast/google-analytics-for-wordpress/issues/438","labels_url":"https://api.github.com/repos/Yoast/google-analytics-for-wordpress/issues/438/labels{/name}","comments_url":"https://api.github.com/repos/Yoast/google-analytics-for-wordpress/issues/438/comments","events_url":"https://api.github.com/repos/Yoast/google-analytics-for-wordpress/issues/438/events","html_url":"https://github.com/Yoast/google-analytics-for-wordpress/issues/438","id":112047561,"number":438,"title":"safety-privacy issue: settings visible from non admin users?","user":{"login":"Elan42","id":6625093,"avatar_url":"https://avatars.githubusercontent.com/u/6625093?v=3","gravatar_id":"","url":"https://api.github.com/users/Elan42","html_url":"https://github.com/Elan42","followers_url":"https://api.github.com/users/Elan42/followers","following_url":"https://api.github.com/users/Elan42/following{/other_user}","gists_url":"https://api.github.com/users/Elan42/gists{/gist_id}","starred_url":"https://api.github.com/users/Elan42/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Elan42/subscriptions","organizations_url":"https://api.github.com/users/Elan42/orgs","repos_url":"https://api.github.com/users/Elan42/repos","events_url":"https://api.github.com/users/Elan42/events{/privacy}","received_events_url":"https://api.github.com/users/Elan42/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/Yoast/google-analytics-for-wordpress/labels/Waiting%20for%20feedback","name":"Waiting for feedback","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-10-18T22:43:55Z","updated_at":"2015-11-29T19:14:00Z","closed_at":null,"body":"Normal users, (my custom user called \"customer\") can view and edit settings !\r\nIsn't that terrible? is there a hook to fix that with capability editing ?\r\n\r\nI want only my admin user to do that !\r\nI have > 40 analytics accounts in my google analytics page and I don't want my customer to see them !\r\n"},"comment":{"url":"https://api.github.com/repos/Yoast/google-analytics-for-wordpress/issues/comments/160454360","html_url":"https://github.com/Yoast/google-analytics-for-wordpress/issues/438#issuecomment-160454360","issue_url":"https://api.github.com/repos/Yoast/google-analytics-for-wordpress/issues/438","id":160454360,"user":{"login":"Elan42","id":6625093,"avatar_url":"https://avatars.githubusercontent.com/u/6625093?v=3","gravatar_id":"","url":"https://api.github.com/users/Elan42","html_url":"https://github.com/Elan42","followers_url":"https://api.github.com/users/Elan42/followers","following_url":"https://api.github.com/users/Elan42/following{/other_user}","gists_url":"https://api.github.com/users/Elan42/gists{/gist_id}","starred_url":"https://api.github.com/users/Elan42/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Elan42/subscriptions","organizations_url":"https://api.github.com/users/Elan42/orgs","repos_url":"https://api.github.com/users/Elan42/repos","events_url":"https://api.github.com/users/Elan42/events{/privacy}","received_events_url":"https://api.github.com/users/Elan42/received_events","type":"User","site_admin":false},"created_at":"2015-11-29T19:13:59Z","updated_at":"2015-11-29T19:13:59Z","body":"This is the code with wich I create the user:\nif (run_once('add_user_role')) {\n        add_role('cliente', 'Cliente', array(\n                'edit_theme_options' => true,\n                'edit_dashboard' => true,\n                'moderate_comments' => true,\n                'manage_categories' => true,\n                'manage_links' => true,\n                'unfiltered_html' => true,\n                'edit_others_posts' => true,\n                'edit_pages' => true,\n                'edit_others_pages' => true,\n                'edit_published_pages' => true,\n                'publish_pages' => true,\n                'delete_pages' => true,\n                'delete_others_pages' => true,\n                'delete_published_pages' => true,\n                'delete_others_posts' => true,\n                'delete_private_posts' => true,\n                'edit_private_posts' => true,\n                'read_private_posts' => true,\n                'delete_private_pages' => true,\n                'edit_private_pages' => true,\n                'read_private_pages' => true,\n                'edit_published_posts' => true,\n                'upload_files' => true,\n                'publish_posts' => true,\n                'delete_published_posts' => true,\n                'edit_posts' => true,\n                'delete_posts' => true,\n                'edit_theme_options' => true,\n                'read' => true,\n\n                'wpseo_xml' => true,\n                'wpseo_bulk_edit' => true,\n                'gadash_backend_settings' => true,\n                'wpml-string-translation' => false,\n                'ga_display_level' => true,\n                'manage_woocommerce' => true,\n                'manage_woocommerce_orders' => true,\n                'manage_woocommerce_coupons' => true,\n                'manage_woocommerce_products' => true,\n                'view_woocommerce_reports' => true,\n                'shop_manager' => true,\n                'wysija_campaigns' => true,\n                'wysija_subscribers' => true,\n                'wysija_newsletters' => true,\n}\n\nIt works with all plugins ...\n\nDo you have some custom capability to add to the user creation ?\n\n\n2015-10-21 11:53 GMT+02:00 Andrey Savchenko <notifications@github.com>:\n\n> Cannot reproduce with native Editor role.\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/Yoast/google-analytics-for-wordpress/issues/438#issuecomment-149842000>\n> .\n>\n\n\n\n-- \nAlvise Nicoletti\nELAN42///\nnetwork communication\n///\n+393401476103\nwebmaster@elan42.com\n///\nwww.ELAN42.com\n\n\n///\nIl presente messaggio ed ogni eventuale documento allegato potrebbe\ncontenere informazioni riservate e confidenziali. Qualora non foste il\ndestinatario Vi preghiamo di avvertire immediatamente il mittente e\ncancellare il messaggio. Ogni altro uso di questa email, inclusa\nla duplicazione e la divulgazione del contenuto, è proibito.\n\nThis message and any file transmitted with it may contain privileged\nor confidential information. In case you were not listed in the adressed\nrecipient, please notify the sender immediately and delete the message. Any\nother use of this email, including copying it and the disclosure of its\ncontent, is prohibited. <http://www.elan42.com>\n"}}