Capabilities not saving correctly

curtismccaw

Hi, I have checked the 'unfiltered_html' functionality for editors on our site.
When I view a user, who is an editor I see the 'unfiltered_html' checkbox is then unchecked. I have tried to check the 'unfiltered_html' checkbox and save it. When I refresh, the box returns to being unchecked.
Under their profile, I can see that they have the capability listed. But it doesn't work.

The issue happens when an editor is embedding a <script> tag. WordPress is removing the <script> tag as the user doesn't have the correct permissions.

Please can you assist? Many thanks.

vasyl

curtismccaw things are not as simple as you might think when it comes to deal with unfiltered_html. AAM indeed assigns the capability to desired role or user, however, this capability (as well as many other capabilities) has several conditions that needs to be met in order to be allowed:

If you have defined global constant DISALLOW_UNFILTERED_HTML it has to be set to true;
If you have Multisite setup and you have to be super admin in order to have this capability.

Below is the code snippet from the WordPress core that defines these constraints:

case 'unfiltered_html':
    // Disallow unfiltered_html for all users, even admins and super admins.
    if ( defined( 'DISALLOW_UNFILTERED_HTML' ) && DISALLOW_UNFILTERED_HTML ) {
        $caps[] = 'do_not_allow';
    } elseif ( is_multisite() && ! is_super_admin( $user_id ) ) {
        $caps[] = 'do_not_allow';
    } else {
        $caps[] = 'unfiltered_html';
    }
    break;