Limited Admin Role

Changelog

2.3.0

  • Fixed: Rank Math REST API calls (/wp-json/rankmath/v1/updateSettings) returning 403 β€” SEO plugin REST routes are now always whitelisted
  • Fixed: manage_options is temporarily elevated during any SEO plugin REST request so save/update operations work correctly
  • Improved: Capabilities tab now shows SEO plugin sections only when that plugin is actually installed β€” each setting as its own row, all defaulting to enabled
  • Improved: Rank Math redirections, 404 monitor, analytics, site analysis β€” all individually controllable per row
  • Improved: Yoast and AIOSEO caps similarly separated with all defaults on

2.2.0

  • Fixed: Replaced inline <style> echo in access control with wp_add_inline_style() (WordPress.org requirement)
  • Fixed: Replaced inline <style> and <script> in Plugin Access Deny page with wp_add_inline_style() and wp_add_inline_script() (WordPress.org requirement)
  • Improved: Plugin Access Deny now uses explicit slug patterns for Rank Math, Yoast, AIOSEO, WooCommerce and other major plugins β€” all their admin pages reliably appear in the deny list
  • Added: Author URI field in plugin header
  • Updated: Contributors field in readme.txt

2.1.0

  • Fixed: SEO plugins (Rank Math, Rank Math Pro, Yoast SEO, Yoast Premium, AIOSEO, AIOSEO Pro) now fully unrestricted β€” all caps pass through freely
  • Added: SEO Plugins capability category with 15 caps across all supported plugins
  • Added: Auto-detection of active SEO plugins shown on General tab
  • Fixed: WordPress.Security.EscapeOutput errors (escaped $found with wp_kses, $bg with esc_attr)

2.0.0

  • Added full capabilities registry with 15 categorized sections
  • Added per-capability checkbox grid in settings UI
  • Added Plugin Access Deny submenu for per-plugin admin page blocking
  • Added Grant All / Deny All per category, search/filter, Restore Defaults
  • Added toggle switches for quick access blocks
  • Added unsaved-changes warning in settings
  • Rebuilt settings page with tabbed UI
  • All v1 features preserved

1.1.0

  • Added plugin view-only mode (can see installed plugins list, all actions blocked)
  • Added CSS hiding of plugin action links and bulk-action controls
  • Removed Plugins menu from sidebar (now kept visible as read-only)

1.0.0

  • Initial release
  • Custom Admin Panel Manager role
  • WooCommerce Orders, Customers, Users, Reports blocking
  • 12-hour session timeout with configurable settings page
  • REST API blocking for orders, customers, users
  • Compatible with Rank Math, Yoast SEO, WooCommerce HPOS

Plugin Website
Visit website

Author
minhaz52
Version:
2.9.1
Last Updated
April 6, 2026
Requires
WordPress 6.0
Tested Up To
WordPress 6.9.4
Requires PHP
7.4

Share Post

Join our newsletter.

Get insights into what’s happening at ChangelogWP right in your inbox. We don’t believe in spam.