Freemius

Jory Hogeveen

Joachim Jensen

DEV Institute

<p><strong>Restrict User Access is a fast and simple Membership Plugin for WordPress. Restrict your content in minutes, NOT hours.</strong></p>
<p>Quickly set up a paid membership site where your users can get different levels such as Platinum, Gold, or Free. Then, grant those levels when a user purchases a product in WooCommerce.</p>
<h3>👥 Unlimited Access Levels</h3>
<p>Users can have multiple levels, and you control how long memberships should last. When unauthorized users try to access restricted content, you can redirect them to another URL or display a teaser.</p>
<h3>⚡ Level Membership Automations</h3>
<p>Automatically add levels to your users based on something they do (Triggers) or something they are (Traits):</p>
<ul>
<li>User Registration</li>
<li>User Roles</li>
<li>Logged-in or Guests</li>
<li>WooCommerce Purchases</li>
<li>Easy Digital Downloads Purchases</li>
<li>BuddyPress Member Types</li>
<li>GiveWP Donations</li>
</ul>
<h3>🔒 Contextual Content Protection</h3>
<p>Prevent unauthorized users from visiting your posts, pages, or categories. You can even combine the conditions: protect all posts tagged “Premium” written by a select author.</p>
<p>The following Access Conditions are available out of the box:</p>
<ul>
<li>Posts, Pages & Custom Post Types</li>
<li>Content with Tags, Categories, or Custom Taxonomies</li>
<li>Content written by select Authors</li>
<li>Page Templates</li>
<li>Blog Page & Post Type Archives</li>
<li>Author Archives</li>
<li>Taxonomy Archives</li>
<li>Front Page, Search Results, 404 Not Found Page</li>
<li>bbPress Profiles, Forums & Topics</li>
<li>BuddyPress Profile Sections</li>
<li>Languages (Polylang, qTranslate X, TranslatePress, Transposh, Weglot, WPML)</li>
<li>Pods Pages</li>
</ul>
<p>Note that Access Conditions do not apply to content displayed in lists.</p>
<h3>✅ Grant & Deny Capabilities</h3>
<p>The easy-to-use WordPress User Manager gives you full control over the capabilities the members should or shouldn’t have. Access Level Capabilities will override the permissions set by roles or other plugins.</p>
<h3>👁️ Hide Admin Bar & Nav Menu Visibility</h3>
<p>Disable the admin bar for select levels and control what menu items members can see. You can even hide any widget area created with <a href="https://dev.institute/wordpress-sidebars/?utm_source=readme&utm_medium=referral&utm_content=section&utm_campaign=rua" rel="nofollow ugc">Content Aware Sidebars</a></p>
<h3>🤖 Restrict Content from Other Plugins</h3>
<p>Restrict User Access autodetects Custom Post Types and Taxonomies created by any plugin or theme. Built-in support for some of the most popular WordPress plugins means that you e.g. can restrict access to bbPress forums or multilingual content.</p>
<ul>
<li>bbPress</li>
<li>BuddyPress</li>
<li>Easy Digital Downloads</li>
<li>Pods</li>
<li>Polylang</li>
<li>TranslatePress</li>
<li>WooCommerce</li>
<li>Weglot</li>
<li>WPML</li>
<li>and more …</li>
</ul>
<h3>🛡️ WordPress Security Enhancements</h3>
<ul>
<li><strong>WP REST API Content Protection</strong><br />
Enforces PoLA to minimize attack surfaces and stop threat actors from harvesting your data</li>
<li><strong>How to display content in lists</strong><br />
Display excerpts only or hide content when post types are displayed in blog, archives, search results, lists, etc.</li>
</ul>
<h3>📑 Restrict Content with Shortcodes</h3>
<p>Fine-tune content visibility in your posts or pages by adding simple shortcodes:</p>
<pre><code>[restrict level="platinum"]
This content can only be seen by users with Platinum level or above.
[/restrict]

[restrict level="!platinum"]
This content can only be seen by users without Platinum level or above.
[/restrict]

[restrict role="editor,contributor" page="1"]
This content can only be seen by editors and contributors.
Other users will see content from page with ID 1.
[/restrict]

[login-form]
</code></pre>
<h3>👋 Developer-friendly API</h3>
<p>Restrict User Access makes it super easy for developers to programmatically customize WordPress access control by adding a few lines of code to theme templates.</p>
<h4>Example – Add level to current user</h4>
<pre><code>rua_get_user()->add_level($level_id);
</code></pre>
<h4>Example – Check if current user has an active level membership</h4>
<pre><code>if(rua_get_user()->has_level($level_id)) {
    //show restricted content
} else {
    //show content if unauthorized
}
</code></pre>
<p><a href="https://dev.institute/docs/restrict-user-access/developer-api/?utm_source=readme&utm_medium=referral&utm_content=section&utm_campaign=rua" rel="nofollow ugc">View full RUA PHP API documentation here.</a></p>
<h3>🎛️ Premium Add-ons for Restrict User Access</h3>
<p>Complete your WordPress membership site with these powerful extensions</p>
<ul>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=acf&utm_campaign=rua" rel="nofollow ugc">ACF Restriction</a></strong><br />
Restrict content that contain data from Advanced Custom Fields plugin</li>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=date&utm_campaign=rua" rel="nofollow ugc">Date Restriction</a></strong><br />
Restrict content based on the time it was published</li>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=metabox&utm_campaign=rua" rel="nofollow ugc">Meta Box Restriction</a></strong><br />
Restrict content that contain data from Meta Box plugin</li>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=timelock&utm_campaign=rua" rel="nofollow ugc">Timelock</a></strong><br />
Determine when to enable or disable select Access Conditions</li>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=url&utm_campaign=rua" rel="nofollow ugc">URL Restriction</a></strong><br />
Restrict content based on the WordPress URL, with wildcard support</li>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=visibility&utm_campaign=rua" rel="nofollow ugc">Visibility Control</a></strong><br />
Hide content from blog, search results, archives, custom lists, WP REST API, and more</li>
</ul>


Restrict User Access – Ultimate Membership & Content Protection

Create Access Levels and restrict any post, page, category, etc. Supports bbPress, BuddyPress, WooCommerce, WPML, and more.

markmont

<p>This plugin is for a very specific use case:  Your WordPress website is part of an organization that uses OpenID Connect (OIDC) for web single-sign-on as well as for group-based authorization.  In that case, this plugin will let you restrict access to parts of your WordPress website based on OIDC login and group membership information.</p>
<p>This plugin has been tested with:</p>
<ul>
<li><a href="https://www.shibboleth.net/" rel="nofollow ugc">Shibboleth</a> OIDC using the <code>edumember_ismemberof</code> attribute for LDAP group membership.</li>
</ul>
<p>Features:</p>
<ul>
<li>Allow site visitors to log in via OIDC without needing a WordPress user account.</li>
<li>Optionally allow WordPress users to log in via OIDC instead of using their WordPress password.</li>
<li>Optionally restrict access to the entire site to logged-in users or only members of specific groups.</li>
<li>Optionally restrict access to specific pages and posts to logged-in users or only members of specific groups.</li>
<li>Show parts of pages/posts/widgets only to logged-in users or members of specific groups.</li>
<li>Access restrictions apply to site visitors, feeds, the REST API, and XMLRPC.</li>
<li>Shortcodes (Gutenberg blocks planned for a future release)
<ul>
<li><code>umich_oidc_button</code> – Generate a login or logout button.</li>
<li><code>umich_oidc_link</code> – Generate a login or logout link.</li>
<li><code>umich_oidc_logged_in</code> – Show content only if the visitor is logged in.</li>
<li><code>umich_oidc_member</code> – Show content only if the visitor is a member of one or more groups.</li>
<li><code>umich_oidc_not_logged_in</code> – Show content only if the visitor is NOT logged in.</li>
<li><code>umich_oidc_not_member</code> – Show content only if the visitor NOT a member of the specified groups.</li>
<li><code>umich_oidc_url</code> – Generate a login or logout URL.</li>
<li><code>umich_oidc_userinfo</code> – Display information about the currently-logged-in OIDC user.</li>
</ul>
</li>
</ul>
<h3>Restricting private content in search results</h3>
<p>You can prevent content from showing up in web search engine results by restricting access to particular pages/posts.</p>
<p>Search results from WordPress’ built-in search will only show content that the searching user has access to.</p>
<p><strong>WARNING:</strong> WordPress search plugins may show content that the user does not have access to, leaking private information.  Please test search plugins before enabling them.  If a search plugin provides an appropriate WordPress hook for limiting search results, contact us, and we may be able to add support for it to UMich OIDC Login.</p>
<h3>Copyright and license information</h3>
<p>Copyright (c) 2022 Regents of the University of Michigan.</p>
<p>This file is part of the UMich OIDC Login WordPress plugin.</p>
<p>UMich OIDC Login is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.</p>
<p>UMich OIDC Login is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.</p>
<p>You should have received a copy of the GNU General Public License along with UMich OIDC Login. If not, see <a href="https://www.gnu.org/licenses/" rel="nofollow ugc">https://www.gnu.org/licenses/</a>.</p>


UMich OIDC Login

Restrict access to the whole site or only certain parts based on OpenID Connect (OIDC) login and group membership information.

Restrict User Access – Ultimate Membership & Content Protection vs UMich OIDC Login