User Role Editor

Description

With User Role Editor WordPress plugin you can change user role (except Administrator) capabilities easy, with a few clicks.
Just turn on check boxes of capabilities you wish to add to the selected role and click “Update” button to save your changes. That’s done.
Add new roles and customize its capabilities according to your needs, from scratch of as a copy of other existing role.
Unnecessary self-made role can be deleted if there are no users whom such role is assigned.
Role assigned every new created user by default may be changed too.
Capabilities could be assigned on per user basis. Multiple roles could be assigned to user simultaneously.
You can add new capabilities and remove unnecessary capabilities which could be left from uninstalled plugins.
Multi-site support is provided.

To read more about ‘User Role Editor’ visit this page at shinephp.com

Do you need more functionality with quality support in a real time? Do you wish to remove advertisements from User Role Editor pages?
Buy Pro version.
User Role Editor Pro includes extra modules:

  • Block selected admin menu items for role.
  • Hide selected front-end menu items for no logged-in visitors, logged-in users, roles.
  • Block selected widgets under “Appearance” menu for role.
  • Show widgets at front-end for selected roles.
  • Block selected meta boxes (dashboard, posts, pages, custom post types) for role.
  • “Export/Import” module. You can export user roles to the local file and import them then to any WordPress site or other sites of the multi-site WordPress network.
  • Roles and Users permissions management via Network Admin for multisite configuration. One click Synchronization to the whole network.
  • “Other roles access” module allows to define which other roles user with current role may see at WordPress: dropdown menus, e.g assign role to user editing user profile, etc.
  • Manage user access to editing posts/pages/custom post type using posts/pages, authors, taxonomies ID list.
  • Per plugin users access management for plugins activate/deactivate operations.
  • Per form users access management for Gravity Forms plugin.
  • Shortcode to show enclosed content to the users with selected roles only.
  • Posts and pages view restrictions for selected roles.

Pro version is advertisement free. Premium support is included.

Additional Documentation

You can find more information about “User Role Editor” plugin at this page

I am ready to answer on your questions about plugin usage. Use plugin page comments for that.

Screenshots

  • screenshot-1.png User Role Editor main form
  • screenshot-2.png Add/Remove roles or capabilities
  • screenshot-3.png User Capabilities link
  • screenshot-4.png User Capabilities Editor
  • screenshot-5.png Bulk change role for users without roles
  • screenshot-6.png Assign multiple roles to the selected users

Installation

Installation procedure:

  1. Deactivate plugin if you have the previous version installed.
  2. Extract “user-role-editor.zip” archive content to the “/wp-content/plugins/user-role-editor” directory.
  3. Activate “User Role Editor” plugin via ‘Plugins’ menu in WordPress admin menu.
  4. Go to the “Users”-“User Role Editor” menu item and change your WordPress standard roles capabilities according to your needs.

FAQ

  • Does it work with WordPress in multi-site environment?
    Yes, it works with WordPress multi-site. By default plugin works for every blog from your multi-site network as for locally installed blog.
    To update selected role globally for the Network you should turn on the “Apply to All Sites” checkbox. You should have superadmin privileges to use User Role Editor under WordPress multi-site.
    Pro version allows to manage roles of the whole network from the Netwok Admin.

To read full FAQ section visit this page at shinephp.com.

Installation Instructions

Installation procedure:

  1. Deactivate plugin if you have the previous version installed.
  2. Extract “user-role-editor.zip” archive content to the “/wp-content/plugins/user-role-editor” directory.
  3. Activate “User Role Editor” plugin via ‘Plugins’ menu in WordPress admin menu.
  4. Go to the “Users”-“User Role Editor” menu item and change your WordPress standard roles capabilities according to your needs.

Reviews

I love this

Installed this on a multisite network, this worked perfectly to replicate roles accross the network for 40 sites. Peace of mind

Perfect!

Great for anyone coming from another CMS such as Drupal that has this functionality baked in 🙂

Not working Properly

I have used this plugin but it is giving me error “Sorry, you are not allowed to access this page.” constantly. I have used Version 4.32.3

Read all 177 reviews

Contributors & Developers

“User Role Editor” is open source software. The following people have contributed to this plugin.

Contributors

“User Role Editor” has been translated into these 12 locales: French, Turkish, Japanese, German, Russian, Spanish, Italian, Dutch, Czech, Chinese (Taiwan), English (UK), English (Canada). Thank you to the translators for their contributions.

Translate “User Role Editor” into your language.

Interested in development?

Browse the code or subscribe to the development log by RSS.

Changelog

[4.35] 11.06.2017

  • Update: Bulk capabilities selection checkbox is not shown for ‘administrator’ role for single site WP, and is shown if current user is superadmin for multisite WP. It was done to exclude sudden revoke of all capabilities from the ‘administrator’ role.
  • Update: Full copy of JQuery UI 1.11.4 custom theme CSS file (jquery-ui.css) was included.
  • Fix: User->User Role Editor page apparently loads own jQuery UI CSS (instead of use of WordPress default one) in order to exclude the conflicts with themes and plugins which can load own jQuery UI CSS globally not for own pages only.
  • Fix: “Change Log” link was replaced with secure https://www.role-editor.com/changelog

[4.34] 02.06.2017

  • New: Multisite ‘upgrade_network’ capability support was added for compatibility with WordPress 4.8.
  • New: Multisite ‘delete_sites’ capability support was added.
  • Update: Users->Grant Roles: if a single user was selected for “Grant Roles” bulk action, dialog will show the current roles of selected user with checkboxes turned ON (pre-selected).
  • Fix: Transients caching was removed from URE_Lib::_get_post_types() function. It cached post types list too early in some cases.
  • Fix: jQuery UI CSS was updated to fix minor view inconsistency at the URE’s Settings page.
  • Fix: “Reset” presentation code remainders were removed from the main User Role Editor page.
  • Fix: ‘manage_links’ capability was included into a wrong subgroup instead of “Core->General”. It was a mistake in the capabilities group counters for that reason.

[4.33] 19.05.2017

  • Fix: “Users->Without Roles”, “Users->Grant Roles” are shown only to the users with ‘edit_users’ capability.
  • Fix: Roles were updated for all sites of all networks for WordPress multisite. “Apply to All Sites” option updates roles inside a current network only.
  • Update: “Reset” button moved from the “Users->User Role Editor” main page to the “Settings->User Role Editor->Tools” tab.
  • Update: “Users->Grant Roles” button worked only for superadmin or user with ‘ure_manage_options’ capability. User with ‘edit_users’ can use this feature now.
  • New: boolean filter ‘ure_bulk_grant_roles’ allows to not show “Users->Grant Roles” button if you don’t need it.
  • New: boolean filter ‘ure_users_select_primary_role’ can hide ‘Primary role’ selection controls from the user profile edit page.
  • New: boolean filter ‘ure_users_show_wp_change_role’ can hide “Change Role” bulk action selection control from the Users page. So it’s possible to configure permissions for user who can change just other roles of a user without changing his primary role.
  • Update: Settings tabs and dialog stylesheets was updated to jQuery UI 1.11.4 default theme.

[4.32.3] 03.04.2017

  • Fix: Boolean false was sent to WordPress core wp_enqueue_script() function as the 2nd parameter instead of an empty string. We should respect the type of parameter which code author supposed to use initially.
  • Fix: Bulk grant to users multiple roles JavaScript code is loaded now for users.php page only, not globally.

[4.32.2] 17.03.2017

  • Fix: “Users->Grant Roles” button did not work with switched off option “Count Users without role” at “Settings->User Role Editor->Additional Modules” tab. “JQuery UI” library was not loaded.
  • Update: minimal PHP version was raised to 5.3.

[4.32.1] 09.03.2017

  • Fix: URL to users.php page was built incorrectly after bulk roles assignment to the users selected at the 1st page of a users list.

[4.32] 09.03.2017

  • New: Button “Grant Roles” allows to “Assign multiple roles to the selected users” directly from the “Users” page.
  • Update: singleton template was applied to the main User_Role_Editor class. While GLOBALS[‘user-role-editor’] reference to the instance of User_Role_Editor class is still available for the compatibility purpose, call to User_Role_Editor::get_instance() is the best way now to get a reference to the instance of User_Role_Editor class.
  • Fix: Missed ‘unfiltered_html’ capability is shown now at the ‘General’ capabilities group too.

[4.31.1] 06.01.2017

  • Fix: WP transients get/set were removed from URE_Own_Capabilities class. It leaded to the MySQL deadlock in some cases.
  • Update: Base_Lib::get_request_var() sanitizes user input by PHP’s filter_var() in addition to WordPress core’s esc_attr().

[4.31] 14.12.2016

  • New: It’s possible to remove unused user capabilities by list.
  • Fix: There was no support for installations with the hidden/changed URL to wp-admin. URE uses ‘admin_url()’ now to get and check admin URL, instead of direct comparing URL with ‘wp-admin’ string.
  • Fix: Deprecated capabilities were shown in some cases at the ‘Core’ group even with “Show deprecated capabilities” mode switched off.
  • Update: Capability groups CSS classes are prefixed with ‘ure-‘ in order to minimize possible CSS conflicts with other plugins/themes which may load styles with the same classes globally and break URE’s markup.

[4.30] 01.12.2016

  • Update: compatible with WordPress 4.7
  • New: “Granted Only” checkbox to the right from the “Quick Filter” input control allows to show only granted capabilities for the selected role or user.

[4.29] 10.11.2016

  • New: User Role Editor own user capabilities are grouped separately under Custom capabilities.
  • Update: URE_Lib::is_super_admin() uses WordPress core is_super_admin() for multisite setup only. Superadmin is a user with ‘administrator’ role in the case of single site WordPress installation.
    This is the difference with the WordPress core which counts as a superadmin (for single site WP installation) any user with a ‘delete_users’ capability.
  • Update: BaseLib::option_selected() calls were replaced with the calls of a similar selected() function from WordPress core.

[4.28] 20.10.2016

  • New: WooCommerce plugin user capabilities (if exist) are grouped separately under Custom capabilities.
  • Update: Temporally raised permissions flag is taken into account when checking, if user has a superadmin privileges. WordPress is_super_admin() function was replaced with custom wrapper to define if current user is a real superadmin or just a local admin with the temporally raised (add/edit users pages) permissions.

[4.27.2] 15.09.2016

  • Update: There was a conflict with plugins which use a ‘|’ character at the custom user capabilities: e.g. ‘Nginx Helper | Config’ from “Nginx Helper’ plugin.
  • Fix: PHP notice was removed: Undefined property: URE_Role_View::$multisite in wp-content/plugins/user-role-editor/includes/classes/view.php on line 143
  • Fix: WordPress multisite: Settings link under the URE plugin at the plugins list leads to the network admin now, not to the the single site settings page, which does not exist.
  • Fix: WordPress multisite: conflict with “Visual Composer” plugin was resolved: single site administrators could now use Visual Composer editor.
  • Fix: WordPress multisite: changed role name was not replicated to other sites when user clicked “Update” with “Apply to All Sites” option turned ON.

[4.27.1] 22.08.2016

  • Update: There was a conflict with plugins which use a ‘/’ character at the custom user capabilities: e.g. vc_access_rules_backend_editor/disabled_ce_editor from Visual Composer.
  • Update: add/delete, escape, validate user capability code extracted from URE_Lib to the separate URE_Capability class

[4.27] 18.08.2016

  • New: Total/Granted counters were added to the capabilities groups titles.
  • New: “Columns” drop-down menu allows to change capabilities section layout to 1, 2 or 3 columns.
  • New: Capabilities section is limited in height and has independent scrollbar.
  • Update: User Role Editor page markup was updated to use more available space on page.
  • Update: URE_Ajax_Processor class allows to differentiate required user permissions according to action submitted by user.
  • Fix: CSS updated to exclude text overlapping at capabilities groups section when custom post type name is not fitted into 1 line.
  • Fix: required JavaScript files were not loaded at “Network Admin->Settings->User Role Editor” page.

[4.26.3] 25.07.2016

  • Fix: Selecting a sub-group/list of caps does make the ure_select_all_caps checkbox select all within that group, but checking that box when at the “All” top-level group did not work.
  • Fix: Notice: Undefined property: URE_Role_View::$apply_to_all

[4.26.1] 14.07.2016

  • Fix: some bugs, like ‘undefined property’ notices, etc.

[4.26] 14.07.2016

  • New: User capabilities were groupd by functionality for more convenience.
  • Update: URE_KEY_CAPABILITY constant was changed from ‘ure_edit_roles’ to ‘ure_manage_options’. To make possible for non-admin users access to the User Role Editor without access to the ‘administrator’ role and users with ‘administrator’ role.
  • Update: User receives full access to User Role Editor under WordPress multisite if he has ‘manage_network_plugins’ capability instead of ‘manager_network_users’ as earlier. This allows to give user ability to edit network users without giving him access to the User Role Editor.
  • Update: Multisite: use WordPress’s global $current_site->blog_id to define main blog ID instead of selecting the 1st one from the sorted list of blogs.
  • Update: use WP transients at URE_Lib::_get_post_types() to reduce response time.
  • Update: various internal optimizations.

[4.25.2] 03.05.2016

  • Update: Enhanced inner processing of available custom post types list.
  • Update: Uses 15 seconds transient cache in order to not count users without role twice when ‘restrict_manage_users’ action fires.
  • Update: URE fires action ‘profile_update’ after direct update of user permissions in order other plugins may catch such change.
  • Update: All URE’s PHP classes files renamed and moved to the includes/classes subdirectory

[4.25.1] 15.04.2016

  • Fix: Selected role’s capabilities list was returned back to old after click “Update” button. It was showed correctly according to the recent updates just after additional page refresh.
  • Update: deprecated function get_current_user_info() call was replaced with wp_get_current_user().

[4.25] 02.04.2016

  • Important security update: Any registered user could get an administrator access. Thanks to John Muncaster for discovering and wisely reporting it.
  • URE pages title tag was replaced from h2 to h1, for compatibility with other WordPress pages.
  • Fix: “Assign role to the users without role” feature ignored role selected by user.
  • Fix: PHP fatal error (line 34) was raised at uninstall.php for WordPress multisite.
  • Update: action priority 99 was added for role additional options hook action setup.

Click here to look at the full list of changes of User Role Editor plugin.