Steve Puddick

<p>This plugin prevents unauthorized admin users from damaging or compromising your website.</p>
<p>A common technique for hackers is to exploit vulnerabilities in your plugins or theme and try to create an unauthorized admin user for themselves. Once they have admin access they can do whatever they want to your website. They can deface it, display inappropriate content, or carry out many other malicious acts.</p>
<p>Restricted User Activity adds an extra step to the process of allowing Admin users to perform actions on your website. It achieves this by explicitly specifying valid Admin user ids in the wp-config.php file. Even if a hacker was able to create an Admin user for themselves, they won’t be able to perform any actions since their user id would not be in the valid user list.</p>
<p><strong>Note:</strong> This plugin requires some technical knowledge about how the WordPress wp-config.php file works and basic PHP coding. A single line of code needs to be added to the wp-config.php file.</p>


Restricted User Activity

Provides stricter controls for admin user creation and activity

NSquared

TylerDigital

<p>Simple Client Dashboard offers a new “Admin” user role, which fits perfectly between the default WordPress roles for Administrator and Editor access. This allows clients and Webmasters to manage their website content without you having to worry about critical settings or information being removed or adjusted.</p>
<ul>
<li>Preserve your hard work</li>
<li>Avoid unexpected messes and troubleshooting sessions</li>
<li>One-click access restriction</li>
</ul>
<h3>Incorporate Into Your Clients Site with Ease</h3>
<p>Getting started with Simple Client Dashboard is a breeze — unlike other full user-role solutions that eat up your time, this one won’t have you scratching your head or testing endlessly. Simply install this on your client’s site right from the get-go and it’s smooth sailing from there.</p>
<p>There’s little to no setup required, just install Simple Client Dashboard, and you’ll instantly have access to the new “Admin” user role. If you’d like to adjust the “Admin” role, the free plugin offers a clean and tidy interface so that you can make adjustments. And, <a href="https://simpleclientdashboard.com?utm_source=website&utm_medium=promo-link&utm_campaign=wordpress-org&utm_content=readme" rel="nofollow ugc">Simple Client Dashboard Pro</a>, lets you further customize permissions for more advanced third party plugins.</p>
<h3>Give Clients and Webmasters The Access They Need</h3>
<p>Restrict access to only the features and functions they need to manage their site – without breaking it! Restrict their capabilities and permissions just enough to make sure no unexpected problems arise as they begin working on their website.</p>
<h3>Simple and Clean “Admin” Role Editing Interface</h3>
<p>The Simple Client Dashboard offers a clean and straightforward editing interface for the new “Admin” role. Effortlessly make updates to the permissions and abilities that your clients have on their websites with a few clicks.</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/rIOTZyhDNo8?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p><strong>Simple Client Dashboard creates a new user role named “Admin”</strong> which is similar to the default “Administrator” role, but with the following changes:</p>
<h3>Hides Non-essential and Troublesome WordPress Dashboard Items</h3>
<ul>
<li>Hide the WordPress Settings menu</li>
<li>Hide the WordPress Plugins menu</li>
<li>Hide the WordPress Tools menu</li>
<li>Hide the WordPress Users menu</li>
<li>Hide the WordPress Appearance > Editor tab</li>
<li>Disable the theme installation button</li>
<li>Disable theme-switching buttons</li>
<li>Disable the WordPress Core Updates button</li>
</ul>
<p>(More options in <a href="https://simpleclientdashboard.com?utm_source=website&utm_medium=promo-link&utm_campaign=wordpress-org&utm_content=readme" rel="nofollow ugc">Simple Client Dashboard Pro</a>)</p>
<h3>Simple Client Dashboard PRO also provides Third Party Plugin Constraints</h3>
<p>Upgrade to <a href="https://simpleclientdashboard.com?utm_source=website&utm_medium=promo-link&utm_campaign=wordpress-org&utm_content=readme" rel="nofollow ugc">Simple Client Dashboard Pro</a> to get even more control over how the Admin role can interact with popular third party plugins.</p>
<p>Other user role solutions expect you to enter raw code names for permissions or are limited to capabilities that WordPress exposes by default. While Simple Client Dashboard takes it a step further by custom coding beyond standard WordPress permissions.</p>
<ul>
<li>Advanced Custom Fields – Hide ACF menu and settings, including definitions, rules, and fields.</li>
<li>Custom Post Types – Restrict ability to create Custom Post Types.</li>
<li>Contact Form 7 – Restrict the ability to create new forms, delete forms, and edit forms but allow the Admin role to view submissions.</li>
<li>Draw Attention – Restrict ability to add Draw Attention images.</li>
<li>Easy Digital Downloads – Allow the Admin role to manage products, manage customer payments, manage reports & sales data, and/or manage settings</li>
<li>Five Star Business Profile and Scheme – Hide business profile settings.</li>
<li>Gravity Forms – Restrict the ability to create new forms, delete forms, and preview forms. Only allow the Admin role to edit forms and view submissions.</li>
<li>iThemes Security – Hide iThemes security menus and settings.</li>
<li>Jetpack – Hide the Jetpack stats.</li>
<li>LearnDash – Restrict permissions to edit courses, assignments, groups and the group leader.</li>
<li>Ninja Forms – Restrict the ability to import and export forms, manage settings or extensions, and view the system status. Only allow the Admin role to edit forms and view submissions.</li>
<li>Redirection – Remove permission to manage URL redirection settings.</li>
<li>Revolution Slider – Restrict access to the Revolution Slider menu.</li>
<li>Simple Custom CSS – Hide option to add CSS.</li>
<li>SiteGround Optimizer – Hide the Optimizer settings menu.</li>
<li>Sucuri Scanner – Hide security scan information.</li>
<li>TablePress – Hide the TablePress Options screen. Only allow the Admin role to show, edit, import, and export TablePress content.</li>
<li>The Events Calendar – Restrict the Admin role’s ability to manage and delete events, venues, and organizers.</li>
<li>WooCommerce – Hide the settings. Only allow the Admin role to edit & view products, coupons, or orders, allow the Admin role to view reports.</li>
<li>Wordfence – Hide the Wordfence Dashboard Widget</li>
<li>WordPress Plugins – Restrict ability to install, activate, update, edit, and delete plugins.</li>
<li>WordPress Themes – Restrict ability to install, update, switch, edit, or delete themes. Only allow the Admin role to edit theme options such as widgets, menus, and the Customizer.</li>
<li>WP All Import – Remove ability to use WP All Import Settings Menu.</li>
<li>Yoast SEO – Hide Yoast SEO settings menu and hide the SEO meta box when editing pages/posts.</li>
</ul>
<h3>2.1.7.1</h3>
<ul>
<li>New: Added support for Jetpack Stats</li>
</ul>
<h3>2.1.7.0</h3>
<ul>
<li>New: Added GoPricing Plugin Support</li>
<li>New: Added Revolution Slider Plugin Support</li>
<li>New: Added Boss Theme Support</li>
<li>New: Added Canvas Theme Support</li>
<li>New: Added Genesis Theme Support</li>
</ul>
<h3>2.1.6.1</h3>
<ul>
<li>Fixed: members_get_capabilities() conflict with Members plugin</li>
<li>Fixed: CF7 issues with update</li>
<li>Improved: EDD capabilities</li>
</ul>
<h3>2.1.6.0</h3>
<ul>
<li>New: Added Ninja Forms Plugin Support</li>
<li>New: Added LearnDash Plugin Support</li>
<li>New: Added Envato Toolkit Plugin Support</li>
<li>New: Added CPTUI Plugin Support</li>
<li>New: Added Wordfence Plugin Support</li>
<li>New: Added Google Analytics Plugin by Yoast Support</li>
<li>New: Added Divi Theme Support</li>
<li>New: Added NativeChurch Theme Support</li>
<li>Update: Improved Portuguese Language Support</li>
<li>Fixed: Contact Form 7 Support</li>
</ul>
<h3>2.1.5.0</h3>
<ul>
<li>New: Added Settings link in plugins list</li>
<li>New: Added Easy Digital Downloads Module</li>
<li>New: Added iThemes Exchange Module</li>
<li>New: Added WooCommerce Module</li>
<li>New: Added Event Espresso Module</li>
<li>New: Added Events Calendar Module</li>
<li>New: Added WP All Import Module</li>
<li>New: Added Siteground SuperCacher Module</li>
<li>New: Theme support for Avian theme</li>
<li>New: Theme support for Cardinal theme</li>
<li>New: Theme support for Ken theme</li>
<li>New: Theme support for Total theme</li>
<li>Update: Improved Gravity Forms Module</li>
<li>Update: Improved i18n</li>
<li>New: Serbian Language Support</li>
<li>New: Portuguese Language Support (PT & BR)</li>
<li>Fix: multisite activation bug with _blogs() function</li>
<li>Fix: Improve Yoast SEO module</li>
<li>Fix: Fatal error with CF7 module</li>
<li>Fix: config array error on Multisite</li>
<li>Fix: removed Administrator from editable roles</li>
</ul>
<h3>2.1.3.1</h3>
<ul>
<li>Improved: Show Yoast metabox when editing pages (still hide settings) by default</li>
</ul>
<h3>2.1.3.0</h3>
<ul>
<li>New: Hide Users menu (often requested, and really the webmaster user couldn’t do much in this screen anyway)</li>
<li>New: Add support for ACF5 (hide Custom Fields Menu compatible with new version)</li>
<li>New: Add support for Contact Form 7</li>
<li>New: Add support for iThemes Security</li>
</ul>
<h3>2.1.2.1</h3>
<ul>
<li>New: Add support for TablePress [https://wordpress.org/plugins/tablepress/]</li>
</ul>
<h3>2.1.2.0</h3>
<ul>
<li>Multisite bugfix: Prevent webmaster from removing users from individual sites</li>
<li>Multisite bugfix: Stop removing Settings & Tools from network administrator</li>
</ul>
<h3>2.1.1.1</h3>
<ul>
<li>New: Now hides non-essential dashboard items</li>
<li>Fixed: Fixes a conflict with Mizzo theme (thanks djesch)</li>
</ul>
<h3>2.1.1.0</h3>
<ul>
<li>New: Add support for Sucuri Scanner [https://wordpress.org/plugins/sucuri-scanner/]</li>
<li>New: Add support for Advanced Custom Fields [https://wordpress.org/plugins/advanced-custom-fields/]</li>
<li>New: Remove tools menu – so webmaster users can’t import/export/migrate/find&replace</li>
</ul>
<h3>2.1.0.9</h3>
<ul>
<li>New: Add support for Ultimate Branding [http://premium.wpmudev.org/project/ultimate-branding/]</li>
</ul>
<h3>2.1.0.8</h3>
<ul>
<li>Improved: Add Gravity Forms edit_forms capability as an option (only allows entry viewing by default) via filter:<br />
add_filter( ‘td-webmaster-user-roleoption_cap_gravityforms_edit_forms’, __return_true );</li>
</ul>
<h3>2.1.0.7</h3>
<ul>
<li>New: Remove settings menu from wp-admin</li>
</ul>
<h3>2.1.0.5</h3>
<ul>
<li>New: Remove capability to delete users</li>
</ul>
<h3>2.1.0.4</h3>
<ul>
<li>New: Add “editor” cap for role so plugins checking for “editor” explicitly work</li>
</ul>
<h3>2.1.0.3</h3>
<ul>
<li>New: Remove capabiilty to add, edit, promote users</li>
<li>New: Remove capability to update core</li>
</ul>
<h3>2.1.0.2</h3>
<ul>
<li>Initial Release</li>
</ul>


Simple Client Dashboard

Restrict permissions with Simple Client Dashboard. Our new "Admin" user role between Administrator and Editor is perfect for clients and Webmasters.

Restricted User Activity vs Simple Client Dashboard