qaiyo

Qaiyo Access Manager extends WordPress’s built-in permission system. Out of the box, WordPress only lets you assign broad roles (editor, author, contributor…). This plugin lets administrators set fine-grained access rules for individual plugins and custom post types, at both the role level and the individual user level — without writing code or touching <code>functions.php</code>.
Hide WooCommerce from editors, give a single freelancer access to one custom post type, stop contributors from seeing a page builder, redirect each role to its own landing page after login, or protect a block of content on the front end with a shortcode. Administrators always keep full access and can never be locked out.
Plugin & content access
<ul>
<li>Plugin-level access control — Decide which roles can see and manage each installed plugin. The plugin is hidden from the Plugins screen, its action links are removed, and its admin menu pages are removed and blocked (including direct-URL access) for restricted roles. This governs visibility and admin access; it is not a substitute for a plugin’s own internal capability checks.</li>
<li>Custom post type access control — Restrict any custom post type (WooCommerce Products, ACF field groups, portfolios, events…) per role, across the admin menu, list/edit queries, single front-end views (with a configurable redirect) and the core REST API. Content types registered with their own capabilities are also enforced at the capability level, so guests and unauthorised roles are blocked, not just hidden.</li>
<li>Allow / Deny mode per rule — Each rule can either allow only the checked roles, or deny the checked roles and leave everyone else untouched — whichever needs fewer clicks.</li>
<li>User-level overrides — Allow or deny a specific user regardless of their role. User rules always win over role rules.</li>
<li>Access Matrix — A bird’s-eye grid of every plugin and post type against every role, so you can audit your whole site at a glance.</li>
<li>Native capability hints — Next to each plugin and post type, see which roles already hold the relevant WordPress capabilities, so your rules and core roles never silently conflict.</li>
</ul>
Roles, login & front end
<ul>
<li>Login redirect by role — Send each role to its own URL right after login.</li>
<li>Restricted content redirect — Choose where logged-in users land when they open a single item of a content type they cannot access (home, 404, login or a custom URL).</li>
<li>Frontend protection shortcode — <code>[qaiyo_protect role="editor" deny="subscriber" logged_in="yes" cap="edit_posts"]…[/qaiyo_protect]</code> shows or hides content by role, login state or capability, with an optional replacement message.</li>
<li>Customizable restricted notice — Pick the style (info / warning / error / none) and text shown to restricted users, with <code>{user_name}</code>, <code>{site_name}</code> and <code>{admin_email}</code> placeholders.</li>
</ul>
Admin experience
<ul>
<li>Capabilities inspector — A read-only, searchable capability × role matrix that flags core vs plugin capabilities. It never changes your roles — it just shows you what they already hold.</li>
<li>Dashboard summary widget — A WordPress Dashboard widget showing how many plugins and post types are restricted and how many user-level overrides are active, for an at-a-glance health check.</li>
<li>Hide the admin bar — Remove the frontend toolbar for selected roles.</li>
<li>Hide individual admin bar items — Strip specific nodes from the top toolbar per role.</li>
<li>Hide dashboard widgets — Remove dashboard widgets per role.</li>
<li>Update permissions — Let non-admin roles update plugins and/or themes without granting full administrator access (applied at runtime, fully reversible).</li>
<li>JSON import / export — Back up every rule to a JSON file, or migrate your whole configuration to another site.</li>
<li>Explore Qaiyo plugins — An in-admin overview of the Qaiyo plugin family, with a notice on your Qaiyo screens when a newer version of an installed Qaiyo plugin is available.</li>
</ul>
Built for the real world
<ul>
<li>Administrators are protected — Anyone with <code>manage_options</code> always has full access and cannot be restricted.</li>
<li>AJAX save — Rules are saved without a page reload.</li>
<li>Translation ready — Ships with 11 languages: English, Hungarian, German, French, Spanish, Japanese, Portuguese, Italian, Russian, Turkish and Polish.</li>
<li>Translation-plugin compatible — Plays nicely with WPML, Polylang and TranslatePress; internal translation post types are excluded automatically.</li>
<li>WordPress standards — Nonce verification, capability checks, sanitized input and escaped output throughout.</li>
</ul>
Looking for more? Qaiyo Access Manager Pro adds an editable click-to-toggle matrix, rule presets, user groups, bulk actions, temporary (time-limited) access, an activity log, admin page hiding, meta box control and email notifications.

Qaiyo Access Manager

Control which plugins and post types each role or user can access, with allow/deny rules, per-user overrides and a frontend shortcode.

Prakhar Bhatia

Reset file and folder permissions is a powerful yet safe WordPress plugin designed to help administrators reset file and directory permissions to their recommended secure values, and optionally reset file/folder ownership. This tool is particularly useful after site migrations, server changes, or when dealing with permission-related issues.
<h4>Key Features</h4>
<ul>
<li>Dual Functionality: Reset both permissions (0644/0755) and ownership (user/group) in separate tabs</li>
<li>Ownership Management: Change file and folder ownership to the correct web server user (VPS/dedicated servers)</li>
<li>Server Compatibility Check: Automatically detects if ownership functions are available on your server</li>
<li>Batch Processing: Handles large directory structures efficiently with configurable batch sizes</li>
<li>Real-time Progress: Visual progress bar with detailed statistics during processing</li>
<li>Safety First: Multiple security checks and confirmations before making changes</li>
<li>Selective Processing: Choose specific directories to process (entire site, wp-content, plugins, themes, or uploads)</li>
<li>Smart Recommendations: Automatically detects and recommends the correct owner/group for your server</li>
<li>Error Handling: Comprehensive error logging and reporting</li>
<li>Responsive Interface: Works seamlessly on desktop and mobile devices</li>
<li>Security Focused: Only administrators can use this tool, with proper nonce verification</li>
</ul>
<h4>Standard WordPress Permissions</h4>
<ul>
<li>Files (0644): Owner can read/write, group and others can read only</li>
<li>Directories (0755): Owner can read/write/execute, group and others can read/execute</li>
</ul>
<h4>When to Use This Plugin</h4>
For Permission Reset: 
* After migrating your WordPress site to a new server 
* When files have incorrect permissions causing functionality issues 
* For security hardening when permissions are too permissive 
* When troubleshooting file access problems 
* During routine maintenance to ensure proper permissions
For Ownership Reset: 
* After migrating to a new server with a different web server user 
* When WordPress cannot write files or install plugins/themes 
* After manually uploading files via FTP with incorrect ownership 
* When troubleshooting “permission denied” errors despite correct permissions 
* When switching hosting providers or server configurations
<h4>Safety Features</h4>
<ul>
<li>Requires explicit confirmation before processing</li>
<li>Batch processing prevents server timeouts</li>
<li>Real-time progress monitoring</li>
<li>Comprehensive error logging</li>
<li>Restricted to administrators only</li>
<li>Path validation to prevent processing outside WordPress directory</li>
</ul>
<h3>Support</h3>
For support, feature requests, or bug reports: 
* Email: prakhar@nandann.com 
* Website: https://nandann.com 
* Subject: WordPress Development Help Request
Professional WordPress development and troubleshooting services available. Expert solutions for complex WordPress challenges including custom development, site migrations, security audits, and performance optimization.
<h3>Development</h3>
This plugin is developed with security and reliability in mind. All user inputs are sanitized, permissions are validated, and operations are logged for transparency.
<h4>Technical Details</h4>
<ul>
<li>Uses WordPress native functions and hooks</li>
<li>Implements proper AJAX handling with nonce verification</li>
<li>Follows WordPress coding standards</li>
<li>Includes comprehensive error handling</li>
<li>Responsive design using WordPress admin styles</li>
</ul>
<h3>Privacy</h3>
This plugin does not collect, store, or transmit any personal data. All operations are performed locally on your server, and no data is sent to external services.
<h3>About the Developer</h3>
Prakhar Bhatia is a professional WordPress developer and troubleshooter with extensive experience in:
<ul>
<li>WordPress Troubleshooting: Expert diagnosis and resolution of complex WordPress issues, performance optimization, and security hardening</li>
<li>Custom Development: Bespoke WordPress plugins, themes, and custom functionality tailored to specific business needs </li>
<li>Site Migration & Hosting: Seamless website migrations, hosting optimization, and server configuration for peak performance</li>
<li>Security & Maintenance: Comprehensive security audits, malware removal, and ongoing maintenance to keep sites secure</li>
</ul>
Nandann Creative Agency specializes in WordPress development solutions for businesses of all sizes.
Contact: prakhar@nandann.com | Website: https://nandann.com
<h3>Credits</h3>
Built with security and usability in mind, following WordPress development best practices. Developed by Prakhar Bhatia at Nandann Creative Agency.

Reset file and folder permissions

A WordPress plugin to reset file permissions to 0644, directory permissions to 0755, and file/folder ownership for security and maintenance purposes.

Qaiyo Access Manager vs Reset file and folder permissions