bobbyalcorn

Restrictly™ delivers professional-grade access control without compromising your site’s speed or reliability. 
It enforces rule-based visibility across pages, posts, menus, Full Site Editing (FSE) blocks, search results, and REST API responses, while maintaining full compatibility with themes and page builders.
In the free version, access rules are driven by user roles and login status, providing a clean and reliable foundation for content and navigation control.
Includes Extended Visibility Filtering, which automatically hides restricted content from search results, archives, and public listings.
For full documentation, setup guides, and developer notes, visit the <a href="https://restrictlypro.com" rel="nofollow ugc">official Restrictly™ website</a>.
<h3>Features</h3>
<ul>
<li>Full Site Editing (FSE) Integration – Add block-level visibility directly inside the Site Editor. 
Choose who can see each block (Everyone, Logged-In, Logged-Out, or Specific Roles) with optional color-coded indicators.</li>
<li>Navigation Block Support (FSE Menus) – Manage visibility for navigation links, submenus, and page lists directly within the Site Editor.</li>
<li>Extended Visibility Filtering – Automatically hides restricted content from:
<ul>
<li>Search results</li>
<li>Category, tag, and author archives</li>
<li>Home listings and custom queries</li>
</ul>
</li>
<li>REST API Enforcement – Applies Restrictly™ visibility rules to REST API responses, automatically filtering restricted content for unauthorized users.</li>
<li>Dynamic Menu Visibility (Classic Menus) – Control menu item visibility by login state or user role in the classic menu editor.</li>
<li>Full, Quick, and Bulk Edit Support – Manage restrictions from any editor interface.</li>
<li>Sortable, Filterable Columns – Instantly see and organize restricted items in list tables.</li>
<li>Administrator Override – Allows administrators to bypass restrictions for testing.</li>
<li>Divi & Page Builder Compatibility – Works perfectly with Divi and other builders.</li>
<li>Performance-Focused & Secure – Built entirely on WordPress core APIs with strict sanitization and escaping.</li>
<li>Translation Ready – Includes a <code>.pot</code> file for localization.</li>
<li>Clean Uninstall – Removes all plugin data and options when uninstalled.</li>
</ul>
<h3>Usage</h3>
<h4>Restricting Content</h4>
Restrictly™ lets you limit access to any page or post using intuitive controls: 
– Login-Based Restrictions – Limit visibility to Logged-In or Logged-Out users. 
– Role-Based Restrictions – Allow access only to specific user roles. 
– Enforcement Actions – Display a custom message or redirect unauthorized users. 
– Administrator Override – Admins can always access restricted content when enabled.
<h4>Restricting Blocks (FSE)</h4>
Restrictly™ integrates directly with the WordPress Site Editor (FSE) to provide per-block visibility: 
– Choose Everyone, Logged-In, Logged-Out, or Specific Roles. 
– Instantly preview restrictions using colored visibility indicators. 
– Restrictions are enforced server-side for full security and consistency.
<h4>Restricting Navigation (FSE Menus)</h4>
Restrictly™ also controls FSE Navigation menu visibility: 
– Show or hide individual links, submenus, and page lists by login status or role. 
– Works natively inside the block-based Navigation editor.
<h4>REST API Enforcement</h4>
Restrictly™ applies identical access logic to REST API endpoints. 
Unauthorized users see redacted content instead of restricted data — ensuring privacy across your site.
<h4>Search & Archive Filtering</h4>
Restricted content is automatically excluded from: 
– Search results 
– Category, Tag, and Author archives 
– Home and custom queries
<h4>Restricting Menu Items (Classic Menus)</h4>
<ul>
<li>Login-Based Visibility – Show menu items only to Logged-In or Logged-Out users.</li>
<li>Role-Based Visibility – Display menu items only to selected roles.</li>
<li>Conflict Detection – Highlights mismatched menu vs. page restrictions for easy correction.</li>
</ul>
<h3>Privacy</h3>
Restrictly™ does not collect user data, track activity, or transmit information externally.
<h3>Contributing & Support</h3>
Development happens on GitHub — pull requests and issue reports welcome: 
https://github.com/bobbyalcorn/restrictly
For full documentation and support, visit: 
https://restrictlypro.com

Restrictly – Access Control

Performance-focused access control for WordPress, enforcing rule-based visibility across content, menus, and blocks with a clean core.

markmont

This plugin is for a very specific use case: Your WordPress website is part of an organization that uses OpenID Connect (OIDC) for web single-sign-on as well as for group-based authorization. In that case, this plugin will let you restrict access to parts of your WordPress website based on OIDC login and group membership information.
This plugin has been tested with:
<ul>
<li><a href="https://www.shibboleth.net/" rel="nofollow ugc">Shibboleth</a> OIDC using the <code>edumember_ismemberof</code> attribute for LDAP group membership.</li>
</ul>
Features:
<ul>
<li>Allow site visitors to log in via OIDC without needing a WordPress user account.</li>
<li>Optionally allow WordPress users to log in via OIDC instead of using their WordPress password.</li>
<li>Optionally restrict access to the entire site to logged-in users or only members of specific groups.</li>
<li>Optionally restrict access to specific pages and posts to logged-in users or only members of specific groups.</li>
<li>Show parts of pages/posts/widgets only to logged-in users or members of specific groups.</li>
<li>Access restrictions apply to site visitors, feeds, the REST API, and XMLRPC.</li>
<li>Shortcodes (Gutenberg blocks planned for a future release)
<ul>
<li><code>umich_oidc_button</code> – Generate a login or logout button.</li>
<li><code>umich_oidc_link</code> – Generate a login or logout link.</li>
<li><code>umich_oidc_logged_in</code> – Show content only if the visitor is logged in.</li>
<li><code>umich_oidc_member</code> – Show content only if the visitor is a member of one or more groups.</li>
<li><code>umich_oidc_not_logged_in</code> – Show content only if the visitor is NOT logged in.</li>
<li><code>umich_oidc_not_member</code> – Show content only if the visitor NOT a member of the specified groups.</li>
<li><code>umich_oidc_url</code> – Generate a login or logout URL.</li>
<li><code>umich_oidc_userinfo</code> – Display information about the currently-logged-in OIDC user.</li>
</ul>
</li>
</ul>
<h3>Restricting private content in search results</h3>
You can prevent content from showing up in web search engine results by restricting access to particular pages/posts.
Search results from WordPress’ built-in search will only show content that the searching user has access to.
WARNING: WordPress search plugins may show content that the user does not have access to, leaking private information. Please test search plugins before enabling them. If a search plugin provides an appropriate WordPress hook for limiting search results, contact us, and we may be able to add support for it to UMich OIDC Login.
<h3>Copyright and license information</h3>
Copyright (c) 2022 Regents of the University of Michigan.
This file is part of the UMich OIDC Login WordPress plugin.
UMich OIDC Login is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
UMich OIDC Login is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with UMich OIDC Login. If not, see <a href="https://www.gnu.org/licenses/" rel="nofollow ugc">https://www.gnu.org/licenses/</a>.

UMich OIDC Login

Restrict access to the whole site or only certain parts based on OpenID Connect (OIDC) login and group membership information.

Restrictly – Access Control vs UMich OIDC Login