qaiyo

Qaiyo Access Manager extends WordPress’s built-in permission system. Out of the box, WordPress only lets you assign broad roles (editor, author, contributor…). This plugin lets administrators set fine-grained access rules for individual plugins and custom post types, at both the role level and the individual user level — without writing code or touching <code>functions.php</code>.
Hide WooCommerce from editors, give a single freelancer access to one custom post type, stop contributors from seeing a page builder, redirect each role to its own landing page after login, or protect a block of content on the front end with a shortcode. Administrators always keep full access and can never be locked out.
Plugin & content access
<ul>
<li>Plugin-level access control — Decide which roles can see and manage each installed plugin. The plugin is hidden from the Plugins screen, its action links are removed, and its admin menu pages are removed and blocked (including direct-URL access) for restricted roles. This governs visibility and admin access; it is not a substitute for a plugin’s own internal capability checks.</li>
<li>Custom post type access control — Restrict any custom post type (WooCommerce Products, ACF field groups, portfolios, events…) per role, across the admin menu, list/edit queries, single front-end views (with a configurable redirect) and the core REST API. Content types registered with their own capabilities are also enforced at the capability level, so guests and unauthorised roles are blocked, not just hidden.</li>
<li>Allow / Deny mode per rule — Each rule can either allow only the checked roles, or deny the checked roles and leave everyone else untouched — whichever needs fewer clicks.</li>
<li>User-level overrides — Allow or deny a specific user regardless of their role. User rules always win over role rules.</li>
<li>Access Matrix — A bird’s-eye grid of every plugin and post type against every role, so you can audit your whole site at a glance.</li>
<li>Native capability hints — Next to each plugin and post type, see which roles already hold the relevant WordPress capabilities, so your rules and core roles never silently conflict.</li>
</ul>
Roles, login & front end
<ul>
<li>Login redirect by role — Send each role to its own URL right after login.</li>
<li>Restricted content redirect — Choose where logged-in users land when they open a single item of a content type they cannot access (home, 404, login or a custom URL).</li>
<li>Frontend protection shortcode — <code>[qaiyo_protect role="editor" deny="subscriber" logged_in="yes" cap="edit_posts"]…[/qaiyo_protect]</code> shows or hides content by role, login state or capability, with an optional replacement message.</li>
<li>Customizable restricted notice — Pick the style (info / warning / error / none) and text shown to restricted users, with <code>{user_name}</code>, <code>{site_name}</code> and <code>{admin_email}</code> placeholders.</li>
</ul>
Admin experience
<ul>
<li>Capabilities inspector — A read-only, searchable capability × role matrix that flags core vs plugin capabilities. It never changes your roles — it just shows you what they already hold.</li>
<li>Dashboard summary widget — A WordPress Dashboard widget showing how many plugins and post types are restricted and how many user-level overrides are active, for an at-a-glance health check.</li>
<li>Hide the admin bar — Remove the frontend toolbar for selected roles.</li>
<li>Hide individual admin bar items — Strip specific nodes from the top toolbar per role.</li>
<li>Hide dashboard widgets — Remove dashboard widgets per role.</li>
<li>Update permissions — Let non-admin roles update plugins and/or themes without granting full administrator access (applied at runtime, fully reversible).</li>
<li>JSON import / export — Back up every rule to a JSON file, or migrate your whole configuration to another site.</li>
<li>Explore Qaiyo plugins — An in-admin overview of the Qaiyo plugin family, with a notice on your Qaiyo screens when a newer version of an installed Qaiyo plugin is available.</li>
</ul>
Built for the real world
<ul>
<li>Administrators are protected — Anyone with <code>manage_options</code> always has full access and cannot be restricted.</li>
<li>AJAX save — Rules are saved without a page reload.</li>
<li>Translation ready — Ships with 11 languages: English, Hungarian, German, French, Spanish, Japanese, Portuguese, Italian, Russian, Turkish and Polish.</li>
<li>Translation-plugin compatible — Plays nicely with WPML, Polylang and TranslatePress; internal translation post types are excluded automatically.</li>
<li>WordPress standards — Nonce verification, capability checks, sanitized input and escaped output throughout.</li>
</ul>
Looking for more? Qaiyo Access Manager Pro adds an editable click-to-toggle matrix, rule presets, user groups, bulk actions, temporary (time-limited) access, an activity log, admin page hiding, meta box control and email notifications.

Qaiyo Access Manager

Control which plugins and post types each role or user can access, with allow/deny rules, per-user overrides and a frontend shortcode.

Freemius

Jory Hogeveen

Joachim Jensen

DEV Institute

Restrict User Access is a fast and simple Membership Plugin for WordPress. Restrict your content in minutes, NOT hours.
Quickly set up a paid membership site where your users can get different levels such as Platinum, Gold, or Free. Then, grant those levels when a user purchases a product in WooCommerce.
<h3>👥 Unlimited Access Levels</h3>
Users can have multiple levels, and you control how long memberships should last. When unauthorized users try to access restricted content, you can redirect them to another URL or display a teaser.
<h3>⚡ Level Membership Automations</h3>
Automatically add levels to your users based on something they do (Triggers) or something they are (Traits):
<ul>
<li>User Registration</li>
<li>User Roles</li>
<li>Logged-in or Guests</li>
<li>WooCommerce Purchases</li>
<li>Easy Digital Downloads Purchases</li>
<li>BuddyPress Member Types</li>
<li>GiveWP Donations</li>
</ul>
<h3>🔒 Contextual Content Protection</h3>
Prevent unauthorized users from visiting your posts, pages, or categories. You can even combine the conditions: protect all posts tagged “Premium” written by a select author.
The following Access Conditions are available out of the box:
<ul>
<li>Posts, Pages & Custom Post Types</li>
<li>Content with Tags, Categories, or Custom Taxonomies</li>
<li>Content written by select Authors</li>
<li>Page Templates</li>
<li>Blog Page & Post Type Archives</li>
<li>Author Archives</li>
<li>Taxonomy Archives</li>
<li>Front Page, Search Results, 404 Not Found Page</li>
<li>bbPress Profiles, Forums & Topics</li>
<li>BuddyPress Profile Sections</li>
<li>Languages (Polylang, qTranslate X, TranslatePress, Transposh, Weglot, WPML)</li>
<li>Pods Pages</li>
</ul>
Note that Access Conditions do not apply to content displayed in lists.
<h3>✅ Grant & Deny Capabilities</h3>
The easy-to-use WordPress User Manager gives you full control over the capabilities the members should or shouldn’t have. Access Level Capabilities will override the permissions set by roles or other plugins.
<h3>👁️ Hide Admin Bar & Nav Menu Visibility</h3>
Disable the admin bar for select levels and control what menu items members can see. You can even hide any widget area created with <a href="https://dev.institute/wordpress-sidebars/?utm_source=readme&utm_medium=referral&utm_content=section&utm_campaign=rua" rel="nofollow ugc">Content Aware Sidebars</a>
<h3>🤖 Restrict Content from Other Plugins</h3>
Restrict User Access autodetects Custom Post Types and Taxonomies created by any plugin or theme. Built-in support for some of the most popular WordPress plugins means that you e.g. can restrict access to bbPress forums or multilingual content.
<ul>
<li>bbPress</li>
<li>BuddyPress</li>
<li>Easy Digital Downloads</li>
<li>Pods</li>
<li>Polylang</li>
<li>TranslatePress</li>
<li>WooCommerce</li>
<li>Weglot</li>
<li>WPML</li>
<li>and more …</li>
</ul>
<h3>🛡️ WordPress Security Enhancements</h3>
<ul>
<li>WP REST API Content Protection 
Enforces PoLA to minimize attack surfaces and stop threat actors from harvesting your data</li>
<li>How to display content in lists 
Display excerpts only or hide content when post types are displayed in blog, archives, search results, lists, etc.</li>
</ul>
<h3>📑 Restrict Content with Shortcodes</h3>
Fine-tune content visibility in your posts or pages by adding simple shortcodes:
<pre><code>[restrict level="platinum"]
This content can only be seen by users with Platinum level or above.
[/restrict]

[restrict level="!platinum"]
This content can only be seen by users without Platinum level or above.
[/restrict]

[restrict role="editor,contributor" page="1"]
This content can only be seen by editors and contributors.
Other users will see content from page with ID 1.
[/restrict]

[login-form]
</code></pre>
<h3>👋 Developer-friendly API</h3>
Restrict User Access makes it super easy for developers to programmatically customize WordPress access control by adding a few lines of code to theme templates.
<h4>Example – Add level to current user</h4>
<pre><code>rua_get_user()->add_level($level_id);
</code></pre>
<h4>Example – Check if current user has an active level membership</h4>
<pre><code>if(rua_get_user()->has_level($level_id)) {
 //show restricted content
} else {
 //show content if unauthorized
}
</code></pre>
<a href="https://dev.institute/docs/restrict-user-access/developer-api/?utm_source=readme&utm_medium=referral&utm_content=section&utm_campaign=rua" rel="nofollow ugc">View full RUA PHP API documentation here.</a>
<h3>🎛️ Premium Add-ons for Restrict User Access</h3>
Complete your WordPress membership site with these powerful extensions
<ul>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=acf&utm_campaign=rua" rel="nofollow ugc">ACF Restriction</a> 
Restrict content that contain data from Advanced Custom Fields plugin</li>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=date&utm_campaign=rua" rel="nofollow ugc">Date Restriction</a> 
Restrict content based on the time it was published</li>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=metabox&utm_campaign=rua" rel="nofollow ugc">Meta Box Restriction</a> 
Restrict content that contain data from Meta Box plugin</li>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=timelock&utm_campaign=rua" rel="nofollow ugc">Timelock</a> 
Determine when to enable or disable select Access Conditions</li>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=url&utm_campaign=rua" rel="nofollow ugc">URL Restriction</a> 
Restrict content based on the WordPress URL, with wildcard support</li>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=visibility&utm_campaign=rua" rel="nofollow ugc">Visibility Control</a> 
Hide content from blog, search results, archives, custom lists, WP REST API, and more</li>
</ul>

Restrict User Access – Ultimate Membership & Content Protection

Create Access Levels and restrict any post, page, category, etc. Supports bbPress, BuddyPress, WooCommerce, WPML, and more.

Qaiyo Access Manager vs Restrict User Access – Ultimate Membership & Content Protection