muis IT

Role Base Access Manager: Media Protector
WordPress plugin to assign access roles to individual files.
This simple plugin allows administrators (anyone with access to the edit-post form for attachments/media) to set access based on roles. 
The plugin provides a ‘Security’ meta-box on the right hand side where you can type in role names and select them (much like you add tags 
to regular posts). Whenever a visitor wants to download or view a file or image from the uploads directory, his/her current roles are checked 
against the configured roles.
This plugin tries to look for originals of resized and rescaled images by making a rough search in the meta data table. This allows you to 
mark the original image of a blog entry for specific access and have all thumbnails and other derived images be protected as well. Please note 
that this plugin does not clean up after you. If for some reason left-over thumbnails remain in the upload directory, the plugin cannot find 
them in the database and will allow access.
<h3>Roles</h3>
This plugin works based on role access management. That means it will try to match the specified roles on the media with the available roles of a user. However, the capabilities system of <code>WordPress</code> is cumulative: an <code>Administrator</code> has more privileges as an <code>Editor</code>, but at least the 
same. Usually, people only have one Role in this system. As this plugin does not check on capabilities, but on roles, you will need to specify 
all the roles that should have access to this file (including the ‘administrator’ role).
Alternatively, you can add secondary roles to a User, allowing <code>Administrator</code> to also be a <code>Subscriber</code>. In this way, you only need to add the 
 Subscriber role to media files to allow it to be downloaded by all registered members. However, adding secondary roles is a manual task. If you have many users and few files, it can be easier to specifiy all roles with the media. If you have many files and few users, you had better use secondary role assignments. If you have many files and many users, you should look into a way to automatically assign roles to people using some sort of on-boarding method. If you need a plugin for that, send me a message.
<h3>Redirections</h3>
The plugin works by inserting a redirection script in your <code>.htaccess</code> file on activation. This does not work properly for <code>NGinX</code>, in which 
case you have to insert a redirection manually. Freely copied from the [https://wordpress.org/plugins/aam-protected-media-files/](AAM Protected Media Files) description:
<pre><code>`
</code></pre>
location ~* ^/wp-content/uploads/ { 
 rewrite (?i)^(/wp-content/uploads/.*)$ /index.php?rbam-media=1 last; 
 return 307; 
} 
 `
The plugin will try to read the accessed file from the original request and apply role based access management on it.

Role Based Access Manager: Media Protector

Role Based Access Management for Media files (attachments).

Justin Fletcher

keycapability

There are lots of plugins to handle roles and capabilities, however, none provide one simple interface for allocating multiple roles to a user.
This plugin expects the complexity of capabilities to be handled by the Administrator through another plugin, I’m not reproducing what is already available. What ‘Role Includer’ allows is for any user with the ‘promote_users’ capability a simple way to handle allocation of roles and only that.
So by simply creating a new role, for example “staff” and adding the ‘promote_users’ capability to this role, all staff members will be able to handle role assignment.
If you wish to hide/mask-out a particular role from “staff” ( such as “Administrator” ) so that staff cannot allocate the higher access level then you can exclude higher roles by using the “Role Excluder” plugin available over at <a href="https://justinandco.com/plugins/" rel="nofollow ugc">justinandco.com</a>
<h4>Plugin site</h4>
http://justinandco.com/plugins/role-includer/
<h4>GitHub – Development</h4>
https://github.com/justinticktock/role-includer

Role Includer

This plugin gets the job done. I'm using it in combination with Ultimate Member, one of those free all-in-one plugins that markets itself as the #1 user profile and membership plugin.

However, Ultimate Member doesn't have the ability to assign multiple roles to a single user and it doesn't look like they're going to add it (see this ticket from August 2017). I didn't want another bloated membership plugin because I put all my eggs in this basket, and the client's project I'm working on has a quick approaching deadline.

This small little utility plugin came to my rescue and is perfect for just adding in this snippet of much-needed functionality. Thank YOU!

Lightweight and Compatible with Ultimate Member

Simple settings page to allocate multiple roles to a user.

Role Based Access Manager: Media Protector vs Role Includer