Role Membership Access for WooCommerce
| 开发者 | jrtwebsolutions |
|---|---|
| 更新时间 | 2026年9月23日 11:45 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Role Membership Access for WooCommerce lets you restrict WooCommerce product visibility, purchasing, add-to-cart, cart, and checkout access based on WordPress user roles.
You can:
- Restrict access using Category Allowed Roles (Products → Categories).
- Restrict access using Product Allowed Roles with Access Mode (Products → Edit Product).
- Prevent unauthorized users from:
- Viewing restricted products in the shop/catalog (theme dependent, hardened via filters)
- Adding restricted products to cart
- Purchasing restricted products
- Completing checkout if restricted products are in cart The plugin provides:
- A WooCommerce Settings tab: WooCommerce → Settings → WooRole Access
- Per-category role restrictions
- Per-product role restrictions with Access Mode (Inherit / Manual / Combine)
- Multi-category conflict strategy options (Union / Intersection / Priority Category)
- Optional redirect for unauthorized users
- A reliable inline notice shown above product title (supports block themes)
安装:
- Upload the plugin folder
role-membership-access-for-woocommerceto/wp-content/plugins/. - Activate the plugin via Plugins → Installed Plugins.
- Ensure WooCommerce is installed and active.
- Configure plugin settings: WooCommerce → Settings → WooRole Access
屏幕截图:
常见问题:
I set roles but users can still access. Why?
Check:
- Product Access Mode
- If it is Inherit, manual roles won’t apply unless Combine/Manual.
- Multi-Category Strategy
- With Union, another category may allow the user role.
- Cache
- Clear page cache/object cache.
- Variable products
- The plugin normalizes variation IDs to parent product, so it should work. Ensure you saved roles on parent product/category.
I can’t see the message/notices on product page.
Some block themes don’t render WooCommerce notices in classic locations. This plugin renders its own inline notice above the product title and includes JS fallback.
Does it support guests (not logged in)?
Yes. Guests are treated as role "guest". If a product is restricted to roles like subscriber/editor, guests are blocked.
Can administrators bypass restrictions?
Yes, administrators are always allowed by default.
更新日志:
1.1.0
- Security: restricted product pages are now protected by default even when redirect is disabled (new "Restricted Product Page Behavior" setting: Teaser / Hide (404) / Redirect).
- Security: restricted products are now excluded from search, shop/category queries, the WooCommerce Store API (block cart/checkout and block-based shop), and the XML sitemap - not just the classic catalog loop.
- Security: restriction checks now also run on admin-ajax and REST requests, not only regular front-end page loads.
- Security: add-to-cart, cart and checkout blocking now use proper WooCommerce error notices (
wc_add_notice) instead of a message that was easy to miss, and added Cart/Checkout Blocks (Store API) support. - Security: admin bypass now checks the
manage_woocommercecapability (filterable viawrma_bypass_capability) instead of theadministratorrole, so Shop Managers are no longer locked out. - Security: allowed roles are now validated against real WordPress roles (plus the virtual "guest" role) before saving.
- Security: the Redirect URL is now sanitized on save and its host is safelisted, so it can no longer silently fall back to wp-admin; guests are now returned to the page they came from after logging in.
- Fix: product settings were being saved twice on every product update; now saved once.
- Fix: uninstalling the plugin now removes its product and category meta instead of leaving it behind.
- Added: "Guest (not logged in)" is now a selectable role everywhere roles are picked.
- Added: an "Access" column on the Products list showing each product's restriction at a glance.
- Added:
wrma_user_has_access,wrma_allowed_roles,wrma_restricted_messageandwrma_bypass_capabilitydeveloper filters. - Added: declared compatibility with High-Performance Order Storage (HPOS) and Cart/Checkout Blocks.
- Internal: access checks are now cached per request instead of re-querying the database on every check.
- Initial release
- Category role restrictions
- Product role restrictions with Access Mode (Inherit/Manual/Combine)
- Cart + Checkout protections
- Multi-category strategy (Union/Intersection/Priority)
- Default primary category support
- Inline product notice + JS fallback (block theme friendly)