How many people would you hand your house keys to and let get into anything that they want? The same can be said about your WordPress account and its users. In this article, we explore some of the easiest ways to limit access for WP users using the admin, code, and plugins.
If you considered your WordPress site like an online home, you wouldn’t always want everyone going through all of your drawers.
The good news is, after reading this, you’ll know how to hand out digital permission accordingly to your users and keep certain areas inaccessible.
To kick things off…
Why Limit Usage?
You trust everyone that has access to your WordPress account, right? Well, sure. Maybe. However, it doesn’t mean they need to have TOTAL access to everything.
There are times you don’t want every user to access it all.
For example, if you’re running a multi-author blog and just want editors to have access to write and publish — and nothing else. That way they can’t change the themes or plugins while logged in.
Or, maybe you don’t want subscribers to access your dashboard at all.
Whatever the case may be, it’s nice to have control over who has access to what, and set your WordPress site up accordingly.
Let’s start by limiting dashboard access in the WordPress dashboard.
Limiting Dashboard Access With Different User Roles and Permissions
If you’re the site owner, you can assign user roles that control how much access to the dashboard they have.
WordPress roles come with different capabilities and actions that users are allowed to conduct, such as writing and editing posts, creating pages, moderating comments, and more.
An easy way to limit access is to set up a new user as a Subscriber. The Subscriber role is very limited and only allows the user to read content on the frontend of the site and manage their profiles.
This can all be done in the admin area of WordPress.
To do this, simply go to Settings and then General. From there, just set any New User Default Role as a Subscriber.
You can change the roles of any user that has access to your site at any time. So, any existing user roles can be modified under Users and then All Users.
This article was written by Nathanael Fakes and originally published on WPMU DEV Blog.