Dion Hulse

<p>On a large multisite network, granting a group of people the same role across many sites usually means adding each user to each site by hand — and remembering to remove them everywhere when they leave. User Teams turns that into:</p>
<ol>
<li>Create a team, pick a role.</li>
<li>Add the user to the team.</li>
<li>They have that role everywhere the team applies.</li>
<li>Remove them from the team <span aria-hidden="true" class="wp-exclude-emoji">→</span> access is gone everywhere.</li>
</ol>
<p>User Teams is multisite-only by design — on a single-site install, native WordPress roles and capabilities already cover the whole feature set, so WordPress won’t offer it for activation there.</p>
<h4>Features</h4>
<ul>
<li><strong>Teams with roles.</strong> Each team carries a WordPress role (editor, administrator, a custom role, or none).</li>
<li><strong>Runtime capability grants.</strong> Team access is added via the <code>user_has_cap</code> filter, so removing a user from a team drops their access on the next request — no stale capabilities usermeta to clean up.</li>
<li><strong>Multisite-native.</strong> Team definitions are real <code>wp_users</code> rows (“team accounts”), so <code>WP_Users_List_Table</code>, <code>is_user_member_of_blog()</code>, and every column-adding plugin “just work”.</li>
<li><strong>Site scoping.</strong> A team can apply network-wide (including sites added later) or to a specific list of sites, each with its own role.</li>
<li><strong>Admin UI.</strong> Network Admin <span aria-hidden="true" class="wp-exclude-emoji">→</span> Users <span aria-hidden="true" class="wp-exclude-emoji">→</span> Teams. Per-user checkboxes on the Edit User screen. Team rows with “— Team” markers on the Users list table.</li>
<li><strong>Cleans up after itself.</strong> Deleting a team removes its memberships. Deleting a user drops their memberships. Deleting a site removes its grants from any team that targeted it.</li>
</ul>
<h4>How access is granted</h4>
<p>Team-derived capabilities are merged in at runtime, never written into the member user’s own meta:</p>
<ul>
<li><code>user_has_cap</code> — adds the team role’s capabilities to the user’s effective caps, plus <code>role-{slug}</code> for plugins that check by role.</li>
<li><code>get_blogs_of_user</code> — adds team-linked sites to the user’s “My Sites” navigation.</li>
<li><code>get_user_metadata</code> — returns an empty-array <code>{prefix}{blog_id}_capabilities</code> for team members so <code>is_user_member_of_blog()</code> returns true without stamping real capabilities on the user. Workaround for <a href="https://core.trac.wordpress.org/ticket/65096" rel="nofollow ugc">Core #65096</a>.</li>
</ul>
<p>The user’s actual <code>{prefix}capabilities</code> usermeta is never modified. That’s what makes team-based access instantly revocable.</p>
<h4>Capability requirements</h4>
<ul>
<li>Managing teams (create / edit / delete) requires <code>manage_network_users</code> — super admin only.</li>
<li>Attaching an existing team to the current site uses <code>promote_users</code>, the same cap as inviting an individual user there.</li>
</ul>
<p>Team management is restricted to super admins so a compromised single-site admin can’t grant themselves access across the network.</p>
<h4>Extension filters</h4>
<ul>
<li><code>user_teams_team_caps_for_user( $caps, $user_id, $blog_id )</code> — modify the capability map computed from a user’s teams.</li>
<li><code>user_teams_team_applies_to_site( $applies, $team_id, $blog_id, $team )</code> — gate coverage (e.g. pause a team during a freeze).</li>
<li><code>user_teams_team_save_data( $data, $team_id_or_null, $op )</code> — filter sanitised input on create/update.</li>
</ul>


User Teams

Unix-style user groups for WordPress multisite. Create a team, give it a role, drop users in — access lights up across the network.

Acunetix

<p>Acunetix Secure WordPress plugin is a free and comprehensive security tool that helps you secure your WordPress<br />
installation and suggests corrective measures for: securing file permissions, security of the database, version hiding,<br />
WordPress admin protection and lots more.</p>
<p>Acunetix Secure WordPress checks your WordPress website/blog for security vulnerabilities and suggests corrective actions such as:</p>
<ol>
<li>Passwords</li>
<li>File permissions</li>
<li>Database security</li>
<li>Version hiding</li>
<li>WordPress admin protection/security</li>
<li>Removes WP Generator META tag from core code</li>
</ol>
<h4>Requirements</h4>
<ul>
<li>WordPress version 3.0 and higher</li>
<li>PHP5 (tested with PHP Interpreter >= 5.2.9)</li>
</ul>
<p>For more information on the Acunetix WP Security plug-in and other WordPress security news, visit the<br />
<a href="http://www.acunetix.com/blog/" rel="nofollow ugc">Acunetix Blog</a> and join<br />
our <a href="http://www.facebook.com/Acunetix" rel="nofollow ugc">Facebook</a> page. Post any questions or feedback<br />
on the <a href="https://wordpress.org/support/plugin/secure-wordpress" rel="ugc">Acunetix Secure WordPress plug-in forum</a>.</p>
<h4>Key security features:</h4>
<ul>
<li>Easy backup of WordPress database for disaster recovery</li>
<li>Removal of error-information on login-page</li>
<li>Addition of index.php to the wp-content, wp-content/plugins, wp-content/themes and wp-content/uploads directories to prevent directory listings</li>
<li>Removal of wp-version, except in admin-area</li>
<li>Removal of Really Simple Discovery meta tag</li>
<li>Removal of Windows Live Writer meta tag</li>
<li>Removal of core update information for non-admins</li>
<li>Removal of plugin-update information for non-admins</li>
<li>Removal of theme-update information for non-admins (only WP 2.8 and higher)</li>
<li>Hiding of wp-version in backend-dashboard for non-admins</li>
<li>Removal of version in URLs from scripts and stylesheets only on frontend</li>
<li>Reporting of security overview after WordPress blog is scanned</li>
<li>Reporting of file permissions following security checks</li>
<li>Live traffic tool to monitor your website activity in real time</li>
<li>Integrated tool to change the database prefix</li>
<li>Disabling of database error reporting (if enabled)</li>
<li>Disabling of PHP error reporting</li>
</ul>
<p>For more information on the Acunetix Secure WordPress plug-in and other WordPress security news, visit the<br />
<a href="http://www.acunetix.com/blog/" rel="nofollow ugc">Acunetix Blog</a> and join<br />
our <a href="http://www.facebook.com/Acunetix" rel="nofollow ugc">Facebook</a> page. Post any questions or feedback<br />
on the <a href="https://wordpress.org/support/plugin/secure-wordpress" rel="ugc">Acunetix Secure WordPress plug-in forum</a>.</p>
<h3>WordPress Security</h3>
<p>Security Scanner:</p>
<ol>
<li>Scans WordPress installation for file/directory permissions vulnerabilites</li>
<li>Recommends corrective actions</li>
<li>Scans for general security vulnerabilities</li>
</ol>
<p>For more information on the Acunetix Secure WordPress plug-in and other WordPress security news, visit the<br />
<a href="http://www.acunetix.com/blog/" rel="nofollow ugc">Acunetix Blog</a> and join<br />
our <a href="http://www.facebook.com/Acunetix" rel="nofollow ugc">Facebook</a> page. Post any questions or feedback<br />
on the <a href="https://wordpress.org/support/plugin/secure-wordpress" rel="ugc">Acunetix Secure WordPress plug-in forum</a>.= License =<br />
Good news, this plugin is free for everyone! Since it’s released under the GPL, you can use it free of charge on your personal or commercial blog.</p>
<p>For more information on the Acunetix Secure WordPress plug-in and other WordPress security news, visit the<br />
<a href="http://www.acunetix.com/blog/" rel="nofollow ugc">Acunetix Blog</a> and join<br />
our <a href="http://www.facebook.com/Acunetix" rel="nofollow ugc">Facebook</a> page. Post any questions or feedback<br />
on the <a href="https://wordpress.org/support/plugin/secure-wordpress" rel="ugc">Acunetix Secure WordPress plug-in forum</a>.</p>


Acunetix Secure WordPress

Scans your WordPress installation for security vulnerabilities.

User Teams vs Acunetix Secure WordPress