room34

NEW IN VERSION 2.0.0: Users with a custom role will now only see the posts or pages they are assigned to. We’ve also streamlined the admin interface for easier configuration, and included additional instructions to help you get the proper capabilities assigned to your custom roles.
Custom Access Roles allows you to create, edit and delete custom roles for editing content. It was created to fill a need for a role editor plugin that is focused on providing easy-to-use admin tools for restricting content editing access. It is not concerned with restricting viewing access on the front end.
It is specifically intended for large sites with multiple content editors, where editors (by role, not individually) need to be restricted to only being able to edit specific areas of the site.
With this plugin, administrators of large sites have relatively fine-grained control over which user roles can edit which content, making it possible to manage a team of editors without concern that they will (accidentally or deliberately) edit content they should not have access to.
You can define a fully customized set of capabilities for each role, along with defining a specific set of post categories, pages, and custom post types to which those capabilities apply. For all other content, the role will have read-only access.
Custom Access Roles provides an easy interface for managing these roles and capabilities, with checkboxes for each capability grouped by the standard roles they’re associated with, plus checkboxes for each post category, page, and custom post type, presented in an organized hierarchy.

Custom Access Roles

Create custom roles with editing capability for only specific pages, categories and post types.

FolioVision

Here are the plugin features:
WordPress Updates
WordPress has a major release three times per year, each time with a risk of breaking the way your website works. This plugin removes most of the messages to update (button from dashboard, the admin footer link and admin notice), while adding more information about versions to the updates page. You will see which version you are running and which versions which are available to you and given a choice about your updates.
WordPress also automatically updates your website to the latest minor release. We like that, but these updates can cause issues as well. That’s why BusinessPress delays the updates for 5 days.
This plugin also allows you to prevent your client from installing new plugins (many of which could either cripple or slow their website) while allowing clients to safely take care of existing plugin updates themselves.
<h3>You can disable the following capabilities for other admin users</h3>
<ul>
<li>Activate and deactivate plugins and themes</li>
<li>Update plugins and themes</li>
<li>Update WordPress core</li>
<li>Install, Edit and delete plugns and themes</li>
</ul>
Unnecessary WordPress features
Plugin by default disables the generator tag, REST API and Emojis to keep your site secure and fast. However you can enable these features back on if you prefer, just like the XML-RPC or oEmbed.
Login Logo
You can set your login logo and wp-admin color.
Admin Notices
Plugin by default moves the admin notices into Dashboard -> Notices screen where you can dismiss each notice. More and more plugins show their notices (some more important, some less) so BusinessPress cleans that up to keep you focused.
Login Protection
Plugin also supports fail2ban, see install instructions.
Login Lockout makes sure any user account that gets repeated bad login attempts (even from different IP addresses) gets locked down to ensure the password does not get guessed. User then gets an “Failed login attempts detected” email letting him unlock the account and reminding him to use a strong password.
Tweaks
<ul>
<li>Enable Google style results – Gives you similar layout and keyword highlight.</li>
<li>Enable Link Manager – Legacy feature of WordPress, hidden since version 3.5.</li>
<li>Enhance wp-admin Dropdowns – Makes long, unwieldy select boxes much more user-friendly, including search functionality.</li>
<li>Login redirection – After you log in you will be redirected back to the page where you clicked wp-login.php link, unless there was a custom redirect_to parameter. Uses HTTP referer.</li>
<li>Set Featured Images Automatically – First image in the post becomes the featured image on save.</li>
<li>WordPress core hotfix – are you getting error like “Unable to create directory ../images/2019/11. Is its parent directory writable by the server?” Since October 2019 WordPress doesn’t support ../ in the upload path. So we translate that path to absolute path and check if it’s in the site webroot and then let it pass</li>
<li>Disables the “Password Changed” admin email notifications when a Subscriber level user changes email address</li>
<li>Alphabetically sorting the wp-admin -> Settings menu, making it much easier to find any settings screen!</li>
<li>Hide Password Protected Posts – Password protected posts won’t show up anywhere unless you have the direct link or your are the admin or editor.</li>
<li>WooCommerce Search Speed – Speed up the search by only searching the billing email address and not shipping nor billing address.</li>
<li>Yearly dropdowns for posts filtering – If the standard list of months in wp-admin -> Posts or WooCommerce Orders and Subscriptions is going to show more than 10 months, the years will show instead. Will show only “Last 12 months” by default.</li>
</ul>
WAF
Detect bad requests and log the issue for fail2ban to take action: https://foliovision.com/wordpress/plugins/businesspress/malicious-requests-businesspress
Credits
This plugin integrates some of the amazing WordPress plugins which keep it lean and removed the unnecessary features:
Disable Embeds by Pascal Birchler with our own improvements 
Disable Emojis by Ryan Hellyer 
Disable REST API by Dave McHale 
Login Logo by Mark Jaquith with our own improvements 
WP Chosen by John James Jacoby with some small performance improvements
<a href="http://foliovision.com/support/" rel="nofollow ugc">Support</a>

BusinessPress

There are too many upgrades of WordPress (2 per year) and plugins. When it just works as expected, I am always worried if something will break my site. The pace is too much and too fast to follow. It is very stressful for a webdeveloper, especially when you manage several websites. This plugin removes the admin notifications, consequently, clients will not be tempted to click the update button and break something. It does this without sacrificing the automatic security WordPress updates.
We do the updates when we decide to do them. It removes a strong distraction (the number in the red badge is always encouraging to click on it) than can generate troubles.

As long as there is no standard way to separate security and bugfix updates that are always welcome, from upgrades that add new features (and may potentially break something), this plugin is doing a good job.

There are other tweaks regarding overall security and performance but I don't care about them since other plugins offer the same with more controls.

This plugin is an answer to a growing concern from webdeveloppers

BusinessPress lets you control the WordPress core updates and plugin installing/editing/upgrading to prevent issues with your business websites.

Custom Access Roles vs BusinessPress