Brendigo

BrenWP Client Safe Mode helps you troubleshoot safely and reduce risk when handing a WordPress site to clients or non-technical users.
Safe Mode is per-user: it applies only to the currently logged-in user who enabled it. Visitors and other users are not affected.
<h4>Safe Mode (per-user) can optionally</h4>
<ul>
<li>Block access to risky wp-admin screens (plugin/theme management, core updates, Site Health, and update actions)</li>
<li>Disable file modifications (plugin/theme installs, updates, editors)</li>
<li>Optionally block update/install capabilities (prevents running updates/installs even via alternative flows)</li>
<li>Optionally block destructive capabilities (prevents deleting plugins/themes while Safe Mode is enabled)</li>
<li>Optionally disable the built-in plugin/theme editors (capability-based) while Safe Mode is enabled</li>
<li>Hide update notices</li>
<li>Trim selected admin bar nodes (Updates / Comments / New Content)</li>
<li>Auto-disable after a configurable number of minutes (optional)</li>
</ul>
<h4>Client restrictions (role-based + optional user targeting) can</h4>
<ul>
<li>Optionally target a specific user account (in addition to roles)</li>
<li>Hide risky menus</li>
<li>Block direct access to sensitive wp-admin screens</li>
<li>Disable file modifications</li>
<li>Hide update notices</li>
<li>Optionally limit the Media Library to a user’s own uploads (privacy on multi-author sites)</li>
<li>Optionally hide common Dashboard widgets for restricted roles (UI cleanup)</li>
<li>Optionally hide the Screen Options dropdown (independent toggle)</li>
<li>Optionally hide the Admin Bar on the front end for restricted roles</li>
<li>Optionally block Customizer access (customize.php)</li>
<li>Optionally block Users screens (Users list/Add/Edit) even if the broader screen blocklist is disabled</li>
<li>Optionally block Tools screens (Tools/Import/Export) even if the broader screen blocklist is disabled</li>
<li>Optionally lock profile email/password changes for restricted roles (prevents self-service account takeover)</li>
<li>Optionally show a dismissible 2FA security reminder notice (notice only)</li>
<li>Optionally hide the Admin Bar on the front end for restricted roles</li>
</ul>
<h4>General hardening (site-wide, optional)</h4>
<ul>
<li>Disable XML-RPC</li>
<li>Disable the built-in plugin/theme editors for all users (capability-based)</li>
<li>Optional settings export download (admin-only) via a nonce-protected endpoint (default OFF)</li>
</ul>
Administrators are never restricted by client restrictions. On multisite, super-admins are also excluded.
<h4>Privacy</h4>
This plugin does not send data to external services. It performs no tracking, telemetry, analytics, or “phone-home” requests.
<h4>Data stored on your site</h4>
The plugin stores the minimum required data to provide Safe Mode and optional auditing:
<ul>
<li>Options (Settings): stored in the <code>brenwp_csm_options</code> option (site option). This contains your configured settings.</li>
<li>Activity log (optional): stored in the <code>brenwp_csm_activity_log</code> option only if Activity logging is enabled. This log is bounded by Max entries and can optionally be pruned by age (Retention days).</li>
<li>Operational options: internal housekeeping options such as <code>brenwp_csm_last_settings_change</code> and a short-lived lock key used to avoid concurrent log writes.</li>
<li>User meta (Safe Mode):
<ul>
<li><code>brenwp_csm_safe_mode</code> (on/off flag for a user)</li>
<li><code>brenwp_csm_safe_mode_until</code> (optional expiry timestamp if auto-off is enabled)</li>
</ul>
</li>
</ul>
<h4>Data minimization and retention</h4>
<ul>
<li>Activity logging is disabled by default.</li>
<li>The activity log does not store IP addresses and attempts to redact likely secrets from context values.</li>
<li>Retention controls:
<ul>
<li>Max entries caps log size.</li>
<li>Retention days can automatically prune older entries (0 = disabled).</li>
<li>The Clear log action removes all log entries immediately (admin-only, nonce protected).</li>
</ul>
</li>
</ul>
<h4>Privacy tools</h4>
The plugin: 
* Adds suggested text to the Privacy Policy Guide (Settings → Privacy) 
* Registers a personal data exporter and eraser for the Safe Mode user meta
<h4>Data deletion</h4>
On uninstall (delete), the plugin removes its options, optional log option, Safe Mode user meta, and (best-effort) the optional <code>bren_client</code> role if it was created by the plugin.
<h3>Security</h3>
This plugin follows WordPress hardening best practices:
<ul>
<li>CSRF protection: all state-changing actions use POST and require a WordPress nonce.</li>
<li>Authorization: privileged admin actions are gated by capability checks (<code>manage_options</code> by default, filterable).</li>
<li>XSS defense: user-controlled data is sanitized on input and escaped on output.</li>
<li>No remote requests: the plugin does not make outbound HTTP requests.</li>
<li>Data minimization: the activity log is bounded, does not store IP addresses, and redacts likely secrets in log context values.</li>
</ul>
Assumptions and scope:
<ul>
<li>The plugin enforces policies inside WordPress; it does not replace server/WAF hardening.</li>
<li>Safe Mode is per-user and does not modify the site’s active plugins/themes list.</li>
</ul>
<h3>Troubleshooting</h3>
<h4>I don’t see the Safe Mode toggle in the admin bar</h4>
<ul>
<li>Confirm the WordPress admin bar is enabled for your account.</li>
<li>Confirm Enforcement is enabled in the plugin settings.</li>
<li>Confirm your role is included in Who can toggle Safe Mode (or you are an administrator / multisite super-admin).</li>
</ul>
<h4>My profile email/password cannot be changed</h4>
If Restrictions → Lock profile email/password is enabled and your account is restricted, you will not be able to change your own email or password. Contact an administrator.
<h4>XML-RPC stopped working</h4>
If you rely on legacy services that require XML-RPC (some old mobile apps / integrations), disable General → Disable XML-RPC.
<h4>I get redirected with an “Access blocked” notice</h4>
A configured policy blocked a sensitive admin screen. Review: 
* Restrictions → Block direct screen access (for restricted roles) 
* Safe Mode → Block risky admin screens (for your account if Safe Mode is enabled)
<h4>Safe Mode is enabled but I want to turn it off</h4>
<ul>
<li>Use the Safe Mode tab to toggle it off.</li>
<li>If auto-off is enabled, it will disable automatically after the configured time window.</li>
<li>If Enforcement is OFF, the UI provides a Clear stored Safe Mode button to remove the stored flag.</li>
</ul>
<h3>Developer Hooks</h3>
Filters: 
* <code>brenwp_csm_required_cap</code> — change the capability required to manage this plugin (default: <code>manage_options</code>). 
* <code>brenwp_csm_presets</code> — customize Dashboard presets (label/description/patch arrays). 
* <code>brenwp_csm_create_client_role</code> — return <code>false</code> to prevent creating the <code>bren_client</code> role on activation. 
* <code>brenwp_csm_client_role_caps</code> — customize capabilities assigned to the <code>bren_client</code> role on activation. 
* <code>brenwp_csm_remove_client_role_on_uninstall</code> — return <code>false</code> to keep the <code>bren_client</code> role during uninstall cleanup.

BrenWP Client Safe Mode

Per-user Safe Mode plus role-based client restrictions for safer troubleshooting and cleaner client handoff.

Freemius

RelyWP

Elliot Sowersby / RelyWP

Better Coupon Restrictions adds additional restrictions and options to your WooCommerce coupons.
When enabled, you will see a new “Better Coupon Restrictions” tab in the coupon edit screen.
From there, you can set the following additional restrictions:
<ul>
<li>
Improved Product Restrictions: This section improves the default product usage restrictions allowing you to set a minimum and maximum quantity for each.
</li>
<li>
Product Category Restrictions: This section improves the default product category usage restrictions allowing you to set a minimum and maximum quantity for each.
</li>
<li>
Cart Restrictions: This section allows you to set restrictions based that cart quantity, subtotal, and total weight.
</li>
<li>
Date Restrictions: This section allows you to set restrictions based on the current date including a date range, select months, or weekdays.
</li>
<li>
Customer Status Restrictions: This section allows you to set restrictions based on the customer’s status including if they are a new customer, or their logged in status.
</li>
<li>
User Role Restrictions: This section allows you to set restrictions based on the customer’s user role.
</li>
</ul>
<h3>PRO Version</h3>
The PRO version of Better Coupon Restrictions includes the following additional features:
<ul>
<li>
Customer Address Restrictions: This section allows you to set restrictions based on the customer’s billing and shipping address. You can also set a maximum use per address.
</li>
<li>
Customer Order History Restrictions: This section allows you to set restrictions based on the customer’s order history including their total spent and total orders.
</li>
<li>
Time Since Last Order Restrictions: This section allows you to set restrictions based on the time since the customer’s last order.
</li>
<li>
Time Registered Restrictions: This section allows you to set restrictions based on the time since the customer registered.
</li>
<li>
Referring Domain Restrictions: This section allows you to set restrictions based on the referring domain.
</li>
<li>
IP Address Restrictions: This section allows you to set restrictions based on the customer’s IP address including allowed and disallowed IP addresses, along with a usage limit per IP.
</li>
<li>
Meta Data Restrictions: This section allows you to set restrictions based on the customer’s meta data.
</li>
<li>
Cookie Restrictions: This section allows you to set restrictions based on the customer’s cookies.
</li>
</ul>
<a href="https://relywp.com/plugins/better-coupon-restrictions/" rel="nofollow ugc">Learn more about Better Coupon Restrictions PRO</a>

Better Coupon Restrictions for WooCommerce

Additional restrictions and options for your WooCommerce coupons.

BrenWP Client Safe Mode vs Better Coupon Restrictions for WooCommerce