normal subscribers can't upload a profil image

[astroidex]

• normal user can't upload an Image (report was: The "add image" button does nothing")
• I tried it with the account of my collegue theklaw (Subscriber) and noticed that she can't upload an image

Problem

• click on button -> nothing happens -> no error message

see also #183#issuecomment-359673050 and #178

[robe2]

I can change the permission of subscribers to upload images, but there doesn't seem to be any granularity I can do beyond that which I guess means they can upload anywhere they can edit.

If folks are okay with me making this change to subscriber role, I can do it.

[astroidex]

Thanks @robe2 for the feedback. Not so nice. Maybe we should have another at the #183 gravatar solution. On the other hand in our wiki a user can edit every page too.

What do you think? @cvvergara @jodygarnett @wildintellect ?

[jodygarnett]

I am really struggling with the different levels, subscriber cannot do much, ... but editor can delete other peoples pages.

I think we need an orientation session on wordpress security roles.

[robe2]

@jodygarnett yes agreed. I have little idea how wordpress security roles work. Doesn't seem to be much granularity (e.g. what section one can edit) in the role admin options.

[robe2]

Looking at roles closer, I think Author might be the right level of granularity we need.

Author is a lower level than Editor. And has 7 permissions:

1. General: Can read (I presume anything not marked as private)
2. Media: Can Upload files
3. Pages: Can Read (I note there is a Edit Pages, and Edit Other's pages that is not checked. So I assume maybe Edit Pages only allows editing of your own pages (same options for delete)
4. Posts: Can (Read | Edit | Delete (and published) ) Posts ( (Edit | Delete) other's posts is unchecked)

[cvvergara]

@astroidex Yes indeed using the gravatar would be nice, but as I mentioned before the whole web page was designed using the image that has to be uploaded manually. @robe2 solution of allowing subscribers to upload images is the best one right now. Once we figure out what part of the php code needs to be changed and how to make use of the gravatar then the images could work like:

if 
  there is a gravatar use it 
else
 use the uploaded image

In any case the subscriber needs to upload the image

@robe2 I experimented on what Author can do or con not do, I dont the author role

[jodygarnett]

I am concerned that the gravatar is doing more harm then good now, people see their face and do not notice they need to upload an image. We have a lot of "empty" faces showing up when looking at projects or the members list.

[robe2]

I think rather than using a built-in might be better to just create our own role, maybe call it

OSGeo Basic

I'm hesitant to muck with existing roles since the level of permission isn't entirely clear from the names.

So was thinking OSGeo Basic for starters would just be able to do what subscriber does plus upload images. We might want to add more permissions after.

[cvvergara]

@robe2 does not matter what role name they use, the issues I mentioned on the report about subscriber apply to all roles.

right now we can give permission to the subscriber to upload an image and "disable" avatar, so when we have made progress on using the avatar, we "enable" it again?

[cvvergara]

@astroidex As far as I can remember this issue is solved, can you please verify.