Highland Software Custom Role Manager
| 开发者 | jgrodgers |
|---|---|
| 更新时间 | 2026年5月11日 00:15 |
| PHP版本: | 7.2 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Highland Software Custom Roles Manager extends WordPress role management by allowing administrators to create custom roles, assign multiple roles to users, and manage capabilities through an intuitive interface.
This plugin follows WordPress best practices for role and capability management, including strict server-side validation and protection against unsafe capability assignment.
Version 1.0.3 improves role loading, synchronization, and compatibility with third-party plugins by automatically detecting and rendering dynamically registered WordPress roles.
The plugin now correctly displays existing user roles and automatically detects roles created by third-party plugins such as WooCommerce, LMS platforms, membership systems, CRM integrations, and other custom role providers — without requiring administrators to resave settings.
安装:
- Upload the plugin folder to
/wp-content/plugins/ - Activate the plugin through the 'Plugins' menu in WordPress
- Navigate to "HS Roles" in the admin menu
- Configure roles and capabilities
屏幕截图:
常见问题:
Can users have multiple roles?
Yes, users can be assigned multiple roles using a checkbox interface.
Are default roles modified?
No. Default WordPress roles are protected and cannot be modified.
Is the administrator role protected?
Yes, sensitive capabilities such as manage_options are restricted.
Will this plugin affect existing users?
No. Existing users retain their roles unless explicitly changed.
Does the plugin support WooCommerce or other plugin roles?
Yes. The plugin automatically detects and renders roles registered by third-party plugins, including WooCommerce, LMS systems, membership plugins, CRM integrations, and other custom role providers.
Do administrators need to resave settings when new roles are added?
No. Newly registered WordPress roles are automatically detected and displayed in the user role interface.
What does the logging system track?
The plugin logs role and capability changes, including who made the change and when it occurred.
更新日志:
1.0.3
- Fix: Existing user roles now correctly render on profile and edit screens.
- Fix: Third-party plugin roles now automatically appear without requiring admin resave.
- Improvement: Enhanced role synchronization to dynamically merge stored configuration with live WordPress roles.
- Improvement: Improved compatibility with WooCommerce, LMS, membership, and other custom role providers.
- Improvement: WordPress core roles are now prioritized at the top of the role assignment interface.
- Improvement: Preserved grouping, separators, and custom ordering while supporting dynamic role discovery.
- Improvement: Improved role rendering reliability for both existing and newly registered roles.
- Feature: Added logging system for role and capability changes (audit trail).
- Improvement: Logs include user, action, and context for better traceability.
- Fix: Resolved issue where existing custom roles were not displayed on load.
- Improvement: Enhanced role synchronization to correctly merge stored configuration with WordPress roles.
- Security: Fixed a privilege escalation vulnerability in role assignment logic.
- Security: Enforced strict server-side capability checks for role modifications.
- Security: Prevented assignment of restricted capabilities such as manage_options.
- Security: Hardened AJAX endpoints with capability and nonce validation.
- Hardening: Improved role validation and synchronization logic.
- Hardening: Added rate limiting to AJAX endpoints.
- Props: Thanks to 0xherc1337 and Steven Stern (sterndata) for responsibly reporting the issue.
- Initial release
- Multi-role assignment
- Role grouping and ordering
- Capability management system