The main issue is that the access restrictions are no longer working at all.

I had the Groups plugin installed and running fine but things were getting complicated for me with Groups and Capabilities, so I went back in and simplified things. Now the access restrictions are not working at all. I’ve looked over my settings several times from several different angles and everything looks correct. What am I doing wrong?

I have a basic Group hierarchy.
– Admin
– Corporate
– Owner
– GM (All)

I then created some basic Capabilities.
– access_all
– access_owner
– access_corp
– access_admin

I then added the Capabilities to the Groups in reverse order.
– Registered (created for Groups: Blog Protect)
— no capabilities
– GM (All)
— access_all
– Owner
— access_all
— access_owner
– Corporate
— access_all
— access_owner
— access_corp
– Admin
— access_all
— access_owner
— access_corp
— access_admin

All seems good, simple and makes sense. Then I started to implement it. I took a Page and added the ‘access_admin (Admin)’ read access restriction. The plugin widget said, “Enforce read access for ‘access_admin (Admin)’. Only groups or users that have one of the selected capabilities are allowed to read this page.”

I logged in as a ‘GM’ user and the page showed up in the Site Map and was able to viewed. What am I doing wrong?

In ‘Options’ I have all four of the Capabilities added as well as the default ‘groups_read_post’. I did not add ‘groups_read_post’ to any of the Groups, but I did test adding it and it made no difference.