Answers.Body: <p>Is it possible to sign up as a subscriber without admin approval? If so <strong><em>remove the access CiviCRM permission right now!!!</em></strong> There is no way that with a publicly available account that I should be able to get any level of access to CiviCRM.</p>
  
  <p>Apologies if I misunderstood and all subscribers need to be approved. Your case may be an instance where you want a custom portal - lots of orgs do this. Even then, they generally (is my understanding) allocate what can and can't be accessed without the access CiviCRM permission.</p>
  
  <p>John</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-03-03T15:27:38.630Z
Answers.Text: Ok.  That's what I was afraid of.  So, a custom portal sounds interesting.  However, I'm not finding much on how to get started.  Got any leads?
Answers.UserDisplayName: G H
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-03-03T15:49:48.127Z
Answers.Text: Additionally, there seems to be a disconnect between documentation and actuality in this area.  The docs say that WordPress users should be created automatically through the profile, but you are saying they need to be approved, which makes sense.  Did I miss something, or am I just seriously confused again?
Answers.UserDisplayName: G H
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-03-02T21:01:19.610Z
Answers.LastActivityDate: 2016-03-02T21:01:19.610Z
Answers.UserDisplayName: JohnFF
Body: <p>I don't believe that I am accomplishing a task correctly, and I'm afraid that I've opened things up too much.  </p>
  
  <p>I have given Subscriber level WordPress users access to CiviCRM: access CiviCRM.  This allows access to the Dashboard:
  <a href="https://example.org/civicrm/?page=CiviCRM&amp;q=civicrm/user&amp;reset=1" rel="nofollow">https://example.org/civicrm/?page=CiviCRM&amp;q=civicrm/user&amp;reset=1</a></p>
  
  <p>Once there, then they can see and edit their donations, but only after giving access to CiviContribute: edit contributions.  </p>
  
  <p>The Dashboard seems to be a very useful feature, but I feel like I'm giving too much access in the ACL's.  With the above scenario, if I have access to the back end of Civi, I can now search for other people and change their contributions also, right?  How should I be doing this?  I feel like I'm missing something in the documentation, but can't seem to hit the right keywords.</p>
  
  <p>Wordpress 4.2.2, CiviCRM 4.7.3</p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-03-03T21:39:28.490Z
Comments.Text: I'm wondering if I have a bigger issue.  Should a user with Subscriber access be able to visit the dashboard link above without any extra rights given once they have logged in?
Comments.UserDisplayName: G H
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-03-04T16:59:33.637Z
Comments.Text: Update:  This particular piece of the issues looks like a problem with a WooCommerce plugin conflict.
Comments.UserDisplayName: G H
Tags: <wordpress><civicontribute><permissions>
Title: Update Credit Card info Permissions
ThreadText: # Update Credit Card info Permissions
  
  (Asked by: username_0 on 2016-03-02)
  
  I don't believe that I am accomplishing a task correctly, and I'm afraid that I've opened things up too much.
  
  I have given Subscriber level WordPress users access to CiviCRM: access CiviCRM. This allows access to the Dashboard:
  <https://example.org/civicrm/?page=CiviCRM&q=civicrm/user&reset=1>
  
  Once there, then they can see and edit their donations, but only after giving access to CiviContribute: edit contributions.
  
  The Dashboard seems to be a very useful feature, but I feel like I'm giving too much access in the ACL's. With the above scenario, if I have access to the back end of Civi, I can now search for other people and change their contributions also, right? How should I be doing this? I feel like I'm missing something in the documentation, but can't seem to hit the right keywords.
  
  Wordpress 4.2.2, CiviCRM 4.7.3
  
  **Tags:** wordpress, civicontribute, permissions
  
  > **Comments:**
  > **username_0**: I'm wondering if I have a bigger issue.  Should a user with Subscriber access be able to visit the dashboard link above without any extra rights given once they have logged in?  
  > **username_0**: Update:  This particular piece of the issues looks like a problem with a WooCommerce plugin conflict.  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2016-03-02. Score: 2
  
  Is it possible to sign up as a subscriber without admin approval? If so ***remove the access CiviCRM permission right now!!!*** There is no way that with a publicly available account that I should be able to get any level of access to CiviCRM.
  
  Apologies if I misunderstood and all subscribers need to be approved. Your case may be an instance where you want a custom portal - lots of orgs do this. Even then, they generally (is my understanding) allocate what can and can't be accessed without the access CiviCRM permission.
  
  John
  
  > **Comments:**
  > **username_0**: Ok.  That's what I was afraid of.  So, a custom portal sounds interesting.  However, I'm not finding much on how to get started.  Got any leads?  
  > **username_0**: Additionally, there seems to be a disconnect between documentation and actuality in this area.  The docs say that WordPress users should be created automatically through the profile, but you are saying they need to be approved, which makes sense.  Did I miss something, or am I just seriously confused again?  
  
  ---
  
  