Pixy Puala

Why this plugin?
WordPress core preview links work well for editors, and Public Post Preview shares via anonymous nonces. 
This plugin adds a missing middle ground: draft previews that are secured by authentication and access control 
lists (ACLs) — role-based, user-specific, or per-email tokens — plus analytics and a one-click revoke-all.
Universal Compatibility
Works seamlessly with: 
* Full Site Editing (FSE) themes 
* Block themes (modern WordPress) 
* Classic PHP-based themes 
* All page builders including Elementor, WPBakery, Divi, etc. 
* WooCommerce product drafts 
* Any CSS framework including Tailwind CSS v4+
Key features
<ul>
<li>Create expiring preview links (default 72h; configurable).</li>
<li>Restrict by roles, specific users, or per-email tokens (no login for recipients).</li>
<li>Require HTTPS for previews (on by default).</li>
<li>Per-link analytics: allowed/denied events, hashed IP, user agent (privacy-friendly).</li>
<li>Meta box in the editor (Post/Page by default; filterable) to generate, copy, and revoke.</li>
<li>“Revoke All” for a post.</li>
<li>Everything prefixed (<code>srpl_</code>), sanitized, and aligned with WordPress coding standards.</li>
</ul>
How it works
Each generated link has a unique token, TTL, and ACL:
<ul>
<li>Role-based Access: Requires login. Only users with allowed roles can view the preview.</li>
<li>User-based Access: Requires login. Only specific user IDs can access the preview.</li>
<li>Email Token Access: No login required. Recipients receive unique URLs with email verification tokens.</li>
</ul>
When a link is visited, SRPL validates the token, expiry, and ACL, then renders the draft with your theme’s header/footer. Events are logged (when enabled) to a small custom table (<code>wp_srpl_events</code>) with hashed IP for privacy.
Privacy
<ul>
<li>IPs are hashed using <code>hash_hmac(sha256, ip, wp_salt('auth'))</code>.</li>
<li>You can disable analytics entirely under Settings → Secure Previews.</li>
</ul>
Developer Friendly
<ul>
<li>Fully documented filters and actions</li>
<li>Clean, object-oriented codebase</li>
<li>PSR-4 autoloading</li>
<li>Extensive inline documentation</li>
</ul>
<h3>Developer Documentation</h3>
Filters
<ul>
<li><code>srpl_supported_post_types</code> – Modify post types that support preview links</li>
<li><code>srpl_default_ttl_hours</code> – Change default expiration time (in hours)</li>
<li><code>srpl_force_ssl</code> – Control whether previews are forced to use HTTPS</li>
<li><code>srpl_analytics_enabled</code> – Enable or disable analytics collection</li>
</ul>
Functions
<ul>
<li><code>LinkManager::create($post_id, $args)</code> – Create a new preview link</li>
<li><code>LinkManager::revoke($link_id)</code> – Revoke a specific link</li>
<li><code>LinkManager::revoke_all_for_post($post_id)</code> – Revoke all links for a post</li>
<li><code>LinkManager::find_by_token($token)</code> – Find a link by its token</li>
</ul>
Database Structure
<ul>
<li>Post Meta for Links: _srpl_token, _srpl_mode, _srpl_roles, _srpl_users, _srpl_emails, _srpl_expires, _srpl_revoked, _srpl_hits, _srpl_last_access</li>
<li>Analytics Table: wp_srpl_events (link_id, post_id, user_id, outcome, ip_hash, ua, created_at)</li>
</ul>
<h3>License</h3>
This plugin is free software, licensed under the GPL v2 or later.

Secure Role-Restricted Draft Previews

Generate secure, expiring preview URLs for drafts with role/user restrictions. Compatible with FSE, Block Themes, and Classic Themes.

mrwweb

This plugin is useful for people who regularly use all or most of the post statuses with Posts, Pages, or Custom Post Types. Post Status Menu Items does the following:
<ol>
<li>Show each post status and number of posts with that status (e.g. “Drafts (7)”) in each post type’s admin menu.</li>
<li>Show the number of Posts with each post status in the “Right Now” / “At a Glance” admin Dashboard Widget.</li>
<li>Show post status icons with each status at the top of admin post list pages.</li>
</ol>
Options give control over which post statuses are displayed and in which menus those statuses are displayed. Post statuses in the “Right Now” / “At a Glance” admin Dashboard widget can also be turned off.
Screenshots of all features and settings are available on <a href="https://wordpress.org/plugins/post-status-menu-items/screenshots/" rel="ugc">the Screenshots page</a>.
Notes
<ul>
<li>Plugin settings available on Settings > Writing.</li>
<li>Statuses with 0 posts are never displayed.</li>
<li>Posts are the only post type for which the post status menu items are enabled by default.</li>
</ul>
This plugin works with custom statuses created by <a href="https://wordpress.org/extend/plugins/edit-flow/" rel="ugc">Edit Flow</a>, <a href="https://wordpress.org/plugins/archived-post-status/" rel="ugc">Archived Post Status</a>, <a href="http://www.advancedcustomfields.com/resources/synchronized-json/" rel="nofollow ugc">Advanced Custom Field PRO “Sync Available” status</a>, <a href="https://wordpress.org/plugins/simple-page-ordering/" rel="ugc">Simple Page Ordering</a>, and <a href="https://codex.wordpress.org/register_post_status" rel="nofollow ugc"><code>register_post_status()</code></a>.
<h4>Other Plugins by MRWweb</h4>
<ul>
<li><a href="https://wordpress.org/plugins/feature-a-page-widget/" rel="ugc">Feature a Page Widget</a> – Shows a summary of any Page in any sidebar.</li>
<li><a href="https://wordpress.org/plugins/mrw-web-design-simple-tinymce/" rel="ugc">MRW Web Design Simple TinyMCE</a> – A compact page editor to encourage good formatting.</li>
<li><a href="https://wordpress.org/plugins/post-type-archive-descriptions/" rel="ugc">Post Type Archive Description</a> – Enables an editable description for a post type to display at the top of the post type archive page.</li>
<li><a href="https://wordpress.org/plugins/hawaiian-characters/" rel="ugc">Hawaiian Characters</a> – Adds the correct characters with diacriticals to the WordPress editor Character Map for Hawaiian</li>
</ul>

Post Status Menu Items

Adds post status links–e.g. "Draft" (7)–to post type admin menus and a few other nice goodies.

Secure Role-Restricted Draft Previews vs Post Status Menu Items