s2Member show post allthough it is protected

[LarsW]

I had problem with that I use Post Level Access Restrictions on a MU-site I can read all post's anyway even when not logged in. I use "all" but s2Member don't work, it work on pages.

Thanks for advice / Lars

Update:
It seems like when using standard in WP Admin Reading settings and using the function "Post page" s2Member don't protect the post's BUT when using the "Your latest post" it protect that.
So I think there is a weakness in the protection when using other page as "Post page"

[Cristián Lávaque]

Sorry Lars, I'm not sure I understand the problem.

I got that you're using multisite, is this problem between blogs or everything within the same blog? Are you protecting in one blog and seeing the post in another blog or in the same one?

Could you explain the update again? I'm confused. Are you talking about the homepage?

[LarsW]

Sorry if it was not clear. It seems like no matter what I do I can't protect post's.

I thought it was solved but when I took the URL direct to one of the MU-sites "Home-page" (the one in the root for that site) it show all post that should be protected. If you wan't to have a look I should be happy.

[Cristián Lávaque]

Are you setting up in one blog the restriction for posts in another blog?

Each blog's instance of s2Member is in its own scope and doesn't work across blogs in the network.

[LarsW]

I am setting s2Member restrict on each MU, I use all both for post and pages. It protect all pages as it should (except that it still show in the Nav-bar
But it don't protect one single post, all is free open to all. I have tested all and each post but still no results.

All (everything protected) is since the only public is the "base" MU and the "sub" MU is all members only.

[Cristián Lávaque]

Ah ok, thanks for answering that. Could you share a link to a test blog you created with the page restriction and also show me a screenshot of the Restriction Options page with all the panels expanded? WP Admin -> s2Member -> Restriction Options

[LarsW]

Christián, could I PM or something like that to you?

OK, the video "Content Restriction Trouble? ( Video )" explained how s2Member "protect" post.

When I changed to excerpt on the theme and 0 words it protect all content (except the heading).
For me that way is not so good. Working on a multisite where ONLY the base MU is for public and should be open.
ALL MU-sub sites should be 100% protected and invisible. ALL content, post and pages if not said something else.

[Cristián Lávaque]

Ah ok, that helps understand what you were having trouble with. Yes, that's the video I'd have suggested.

Did you set the Alternative View Protection to "Yes"? WP Admin -> s2Member -> Restriction Options -> Alternative View Protection

[LarsW]

I tested that but I couldn't see any difference. I took Yes Filter All but nothing happened. Everything looks the same as before?

[Cristián Lávaque]

OK. Did you make sure you aren't logged in when you test viewing the restricted pages?

[LarsW]

I cleared cookies and so on and tested from Firefox and IE
I have the login details if uou want to check the issue.

[Cristián Lávaque]

Thanks. I'll email Jason about this.

By the way, did you edit the roles in any way with a plugin like User Role Editor?

[LarsW]

No, I use just the most common plugins. No special for user handling.

[Cristián Lávaque]

Got it.

Have you tried deactivating other plugins to see if that solved the problem?

[Jason Caldwell]

Thanks for bringing this thread to my attention.

Let's back up just a moment here please.
Can you please elaborate just a bit more about what you said in this post?

OK, the video "Content Restriction Trouble? ( Video )" explained how s2Member "protect" post.

When I changed to excerpt on the theme and 0 words it protect all content (except the heading).
For me that way is not so good. Working on a multisite where ONLY the base MU is for public and should be open.
ALL MU-sub sites should be 100% protected and invisible. ALL content, post and pages if not said something else.

If all else fails, I'll take a look at your installation,
but please give me just a bit more detail regarding these comments.

[LarsW]

Thanks Jason,
I am setting up a completely new blog on another domain to be sure that there isn't any problem with other files/plugins/themes. I will let you know how it goes.
Regards / Lars

[Jason Caldwell]

Awesome. Thanks Lars, keep us posted

[LarsW]

Now I have set up a fresh WP-MU with only 1 Plugin active Akismet (beside s2Member).
I use theme Twenty Ten to be sure it don't affect also.

My goal is to have a multisite for a non profit society (I think church and so on also should be interested in the same) and the base site has most info open to public i.e. http://mysite.com

But ALL subsite's should be 100% only to members, in my case each of 5 cities with it's own site and web-responsible i.e. http://mysite.com/city1 , http://mysite.com/city2 and so on.

On those subsite ALL post (header and content), pages and so on should be 100% locked and prefer that it shouldn't see any Nav-tab or more than for example, "Sorry you must be member" and then link back to the Main site (or better, redirect direct back to the main site).

I have set Restriction Options on the sub-site to "Post Access Restriction" to ALL for Level 0 Or higher, the same for "Page Access" and also use "Alternative View Protection" to "Yes, filter all.."

But still the Post is showing up (It work that it don't show more when clicking header or so BUT I don't want teaser on any subsite) and as I said above 100% should be off limit to public on ALL sub-sites.

I have one other membership script that handle that exactly BUT it don't protect anything on the sub-sites for a MU blog. (But 1 year ago they also didn't "hide the Nav for protected parts, now you can logg in to the same URL and see a lot of things when you are logged in BUT public don't have any Nav or so for the same URL, everything is off limit).

Could I set s2Member to my need?
Take care / Lars

[LarsW]

Wow, I think all works when I added the Plugin "More Privacy Options" from Wordpress org that added 3 levels extra to the "Privacy function" and when I set it to "I would like my blog to be visible only to registered users of.."

This way no blog-post or site come up when I used the URL, you are asked direct for login and the subsite is not showing up until logged in

[yolle555]

Hi!

I just found out that anyone can see all the comments from my blog in the comments feed even though I have restricted all the Alternative views. I have many sections on my blog that members with custom capabilities can access. But, as I found out, even though I am not logged in to my blog I can see all the comments from the restricted sections of my blog in the comments feed. How could I prevent this?

[Cristián Lávaque]

Hi Yolle. What do you have the Alternative Views Protection set to? What versions of WP and s2Member are you running? How did you restrict access to the content that has the comments show in the feeds?

[yolle555]

Hi!

I had it set to ALL, then I tried with Searches&feeds only, but it still wasn't filtering... SO now I just disabled the feed fot the time being...
The WP and the S2member installations are up-to-date, I mean the latest ones, that is 3.2.1 and v110710.
I have the free and the payable sections on my blog. The payable all have s2member Level 1 restriction and in addition to that a specific ccap, I have many of these because I have many different payable sections. It is vital that not only the pages but also the comments are hidden to the free subscribers.

Hope you can help.

Thanks.

[Jason Caldwell]

Thanks for bringing this to my attention.

In the eyes of s2Member, Comment feeds are NOT considered "content", and thus are not protected by any of s2Member's standard protection routines. However, you can probably protect them with s2Member's URI Access Restrictions. You'll need to find a common word fragment associated with all of your Comment feed URLs, and then protect that word fragment in the URI Level Restrictions area provided by s2Member. Please let us know how this goes for you.

[yolle555]

Sadly it doesn't work. It shows all the comments in the feed, but if you click on the comment in the feed you are not able to see it on the blog, as it requires level 1...

[Jason Caldwell]

OK. Thanks for reporting back.
@TODO: Comment feed inclusion for protected Posts/Pages.