Support

November 29, 2012 at 2:00 am

Hello,

I will get a developer to look into this asap. We will get back to you about it.

Thanks

November 29, 2012 at 12:58 pm

JC, We are releasing a better API very soon. In the meantime you can add this to your espresso-services/events.php file to limit scanning only to administrators:

EDIT:This needs to go after line #51
//Get the role for this user
$caps = get_user_meta($userid, 'wp_capabilities', true);
$roles = array_keys((array)$caps);
//Set this to whatever role is needed to scan tickets
if ($roles[0] == 'administrator'){
//Continue
}else{
die("<?xml version='1.0'?><events><error>4</error><desc>Invalid User Role</desc></events>");
} Hope that helps. Please let us knwo if you need anything else.

November 30, 2012 at 1:52 am

Hi JC,

Change administrator to editor, dont have both there. The roles build on each other so an Editor can do what a subscriber can, and an Admin can do what an Editor can. So by changing it to Editor, Editors and above have access.

The subscribers can still log into the app, but they have no rights to see anything at all, so therefore cannot scan a ticket as they cant get to the events.