JianShuo

I created my first plugin when I created my CEO Blog. The problem is obvious: I am going to have a CEO blog where I can share my thoughts with the team frequently. I tried to write a different blog, and I found it is just impossible to maintain two. So I decided to put it on to my own personal blog.
Although most of the articles are public in nature, I do have something that I hope to disclose to the general public later. I don’t want to have complicated OAuth based verification. A simple IP based restriction is good enough. There is no simple solution so I wrote one myself.

IP Only

Restrict access only to specific IP address. Other visitors will see a message. The article is hidden from feed as well.

Upluggit

Media Restriction is a lightweight and powerful WordPress plugin that gives site admins full control over who can see what in the Media Library. Restrict access by user role so that users only see their own uploads, exclude trusted individuals from the restriction, and keep a full audit trail of every upload, deletion, and library view — all from a clean, modern settings panel.
Whether you manage a multi-author blog, an online course platform, a membership site, or a client project — Media Restriction ensures your media library stays tidy, private, and secure.
What makes v2.0.0 different: 
Version 2.0.0 is a complete rebuild. The settings page has been redesigned with a tabbed interface and instant role toggles (no page reloads). A new Activity Log records every media event with user, file name, IP address, and timestamp. REST API protection closes the Gutenberg and headless bypass that most similar plugins miss entirely. And a critical bug affecting excluded users in the grid view has been resolved.
<h3>🌟 Features</h3>
Core restriction 
✅ Restrict media library access by user role 
✅ Works in both grid view (media modal) and list view (Media Library screen) 
✅ Administrators always have full access — no configuration needed 
✅ Exclude specific users from restriction — grant bypass access to trusted individuals regardless of their role 
✅ REST API protection — /wp/v2/media respects the same restriction rules, covering Gutenberg and headless setups
Settings & admin 
✅ Modern tabbed settings page — Roles & Users and Activity Log in one place 
✅ Instant role toggles — enable or disable restriction per role without a page reload 
✅ Live status badges on each role card showing user count and restriction state 
✅ Header summary showing how many roles are restricted and users excluded
Activity log 
✅ Tracks all upload, delete, and view events automatically 
✅ Records user, file name, IP address, and timestamp for every event 
✅ Displays the latest 30 entries in a clean admin table 
✅ One-click clear log with confirmation prompt
Compatibility & clean code 
✅ Works with default WordPress roles and any custom roles (LMS, membership, WooCommerce, etc.) 
✅ Compatible with Gutenberg block editor, classic editor, and headless setups 
✅ Restricted users can still upload and manage their own files — restriction is visibility only 
✅ No impact on existing media files — the plugin never modifies or deletes files 
✅ Clean uninstall — removes all plugin options and database tables on deletion
<h3>🧠 Use Cases</h3>
Online Learning Platforms (LMS): 
Prevent instructors from seeing or using each other’s uploaded course files. Exclude trusted course managers so they retain full access.
Client Sites & Freelancers: 
Limit clients to only their own media uploads, keeping your own assets private and the library uncluttered.
Multi-Author Blogs: 
Ensure each contributor only sees their own images and uploads. Exclude editors who need to manage all media.
Membership or Community Sites: 
Allow members to upload profile or content images but restrict them from browsing admin or other members’ uploads.
Agencies & Teams: 
Give designers and content editors restricted media access while allowing project leads or account managers full visibility.

Media Restriction

Restrict media library access by user role — with activity logging, and REST API protection.

IP Only vs Media Restriction