Membership 2 Pro some users not getting proper access

Some users are not getting access to parts of the site they should be able to access. I've checked that they have active membership in the correct membership group. I've compared settings to other members that do have proper access and can't see anything different.

I've enabled support access.

For example, two test accounts -- user asmphd66 does not have access to the "Tools & Reports Dashboard" menu item or page, but sinemac66 does.

EDIT: I should perhaps add that I have not updated Membership 2 Pro to the current version (we're one update behind, I think) because I have some minor edits to a few of the files and I don't have time to deal with re-doing those right now and it's a live site.

  • scottmcculloch
    • The Incredible Code Injector

    Upon further testing, I've found that if I removed asmphd66 from the membership, and then re-added that membership, the account had appropriate access.

    So, this appears to be a temporary fix... but is there something wrong that I can fix?

    I have clients accessing the site and some have found that after logging out, when they log back in they no longer have access to the sections they should. I can't have them having this experience and having to contact me to "reset" their membership.

    Any ideas?

    Is there a way to continue testing this once I reset the affected accounts? (I will check our staging site to see if it's happening there... perhaps we'll be able to test and fix in that environment).

  • Luís
    • Support

    Hi @scottmcculloch,

    I hope had been good today!

    I tried to access your site using support staff access, but it's displaying the following error message:
    Sorry, this is an invalid access token. You must ask the user to grant access.

    Could you please revoke and after regrant the support staff access again?

    Cheers, Luís

  • scottmcculloch
    • The Incredible Code Injector

    Hi @Luís,

    I have revoked and regranted access on the staging site (let me know if you need the url for that).

    Also, upon further exploration, it appears the problem is related to setting up a site-wide SSL certificate and forcing https... when I disabled the forced SSL on the production site, I couldn't get the problem to occur with new test accounts.

    Thanks,
    Scott

  • scottmcculloch
    • The Incredible Code Injector

    Hi Luis,

    I had to disable the forced SSL because it's a live site and clients couldn't access what they were supposed to be able to access.

    I've also sent an email to our host (WPEngine) to see if it has to do with the SSL cert settings. Here's what I sent them:

    When I enabled the SSL cert, I discovered that our Membershp 2 Pro broke -- people were able to sign up, but the permissions weren't correct... they couldn't access what they were supposed to be able to access on the site. I double-checked and found they were in fact associated with the correct membership level, so it seemed to be somehow the system wasn't honouring the permissions settings for the membership. However, it seemed that they were okay when they first logged in (auto-login on registration) but if they logged out and then back in, they lost access.

    If I disabled their membership and then re-enabled it, they were fine... until the next time they logged out and in.

    I disabled the SSL cert settings and it seems okay again.

    The thing is, we do need the SSL on this site... but for now we've left it insecure in order to be able to use it.

    Thanks
    Scott

  • scottmcculloch
    • The Incredible Code Injector

    Hi @Luís,

    Here's the response I got from the hosting company:

    The SSL configuration is really a matter of preference based on what pages you want to force to load through https. Currently, the site is still accessible through https://

    https://workday.trimergence.com

    It is not redirecting requests for http there though. Plugins can run into conflicts if the force SSL options are enabled on our end. It becomes an issue when the plugin is attempting to redirect to http or https on its own. It seems that Membership 2 Pro does this:

    http://www.paidmembershipspro.com/debugging-httpsssl-issues/

    We'd recommend contacting the developer to confirm the recommended settings for this. If the plugin is already handling the appropriate redirects to https then there will not be a need to configure it on our end.

    So, I'm guessing from this it's best if I can configure the SSL forcing/redirects within Wordpress... would it work to simply change the wp-config to "https://workday.trimergence.com" ? Or would it be better to use the plugin?

    Thanks,
    Scott

  • scottmcculloch
    • The Incredible Code Injector

    Hi @Luís,

    I notice the plugin you referenced hasn't been updated in a while... looking around, I found this:
    https://premium.wpmudev.org/blog/ssl-https-wordpress/

    Are the instructions at the bottom for using SSL with Wordpress still valid?
    Any chance it will still break Membership 2 Pro?

    Would I be better to use one of the plugins?
    https://wordpress.org/plugins/really-simple-ssl/
    https://wordpress.org/plugins/wp-force-ssl/

    My main concern is breaking our Membership 2 Pro, which seemed to happen when I set up the force SSL via the WPEngine settings (i.e., at the host control panel level).

    Thanks,
    Scott

  • Luís
    • Support

    Hi @scottmcculloch,

    I hope had been good today!

    Firstly, sorry for my late reply and all the problems it may have caused.

    The plugin I suggested, actually is not updated a while, I suggest it to try see if solves your issue and in the support forum I didn't saw incompatibilies with the newer versions of WordPress.

    https://wordpress.org/support/plugin/wordpress-https

    The instruction given in post referred, still valid and I not see a way to break Membership 2 Pro:

    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{SERVER_PORT} 80
    RewriteRule ^(.*)$ https://www.mysite.com/$1 [R,L]
    </IfModule>

    I never used the plugins you referred, but as you have a staging site, try install the plugins there or make the .htaccess changes in order to see if solves the issue, before the live site.

    Cheers, Luís

Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.