• Contributors: DrewAPicture
• Tags: dashboard, access, users, administration
• Requires at least: 3.1
• Tested up to: 4.0
• Stable tag: 1.1.1

This WordPress plugin limits user access to the dashboard based on whether users have a chosen capability or role. Disallowed users are redirected to a chosen URL.

• Limit Dashboard access to Administrators only, Admins + Editors, Admins + Editors + Authors, or limit by specific capability.
• Choose your own redirect URL
• Optionally allow user profile access
• Optionally display a message on the login screen
• See Other Notes for more info

A full list of capabilities and their associated roles can be found here: http://codex.wordpress.org/Roles_and_Capabilities

Pull requests are welcome!

1. Search 'Remove Dashboard Access' from the Install Plugins screen.
2. Install plugin, click Activate.

Users lacking the chosen capability or role will be redirected to the URL set in Settings > Dashboard Access.

The Toolbar contains certain important links (even for disallowed users) such as for accessing to the profile editor and/or logging out. Plus, there are many plugins out there for disabling the Toolbar if you really want to.

No. Disable the plugin if you don't wish to leverage the functionality.

• You can limit Dashboard access to Admins only, Editors or above, Authors or above, or by selecting a capability. More information on WordPress' default roles and capabilities can be found here: http://codex.wordpress.org/Roles_and_Capabilities

• You can optionally allow all users the ability to edit their profiles in the Dashboard. Users lacking the chosen capability won't be able to access any other sections of the Dashboard.

• Supply a message to display on the login screen. Leaving this blank disables the message.

This hides some built-in WordPress Toolbar menus by default, but can be extended to hide menus from other plugins or themes via two filters: rda_toolbar_nodes, and rda_frontend_toolbar_nodes.

• In the HTML page source, look for the <li> container for the menu node you're targeting. It should take the form of <li id="wp-admin-bar-SOMETHING">
• In <li id="wp-admin-bar-SOMETHING">, you want the "SOMETHING" part.

/**
 * Filter hidden Toolbar menus on the front-end.
 *
 * @param array $ids Toolbar menu IDs.
 * @return array (maybe) filtered front-end Toolbar menu IDs.
 */
function hide_some_toolbar_menu( $ids ) {
	$ids[] = 'SOMETHING';
	return $ids;
}
add_filter( 'rda_frontend_toolbar_nodes', 'hide_some_toolbar_menu' );

• To view debugging information on the Settings > Reading screen, visit yoursite.com/options-general.php?page=dashboard-access&rda_debug=1

Enhancements:

• Full multisite support, including the ability to choose Multisite-specific capabilities.
• More complete filter documentation
• New filter: rda_capabilities_list for filtering the capabilities drop-down list
• New filter: rda_login_message for filtering the login message
• New filter: rda_menu_pages_to_remove for filter the list of menu pages to remove

Bug Fix:

• Move options back to Settings > Dashboard Access screen to resolve conflict with page_on_front UI.

Enhancements:

• Instantiate as a static instance for better modularity
• Move Dashboard Access Controls settings to Settings > Dashboard Access
• Add optional login message option
• Add better settings sanitization
• New Filter: rda_default_caps_for_role - Filter default roles for Admins, Editors, and Authors

Bug Fixes:

• Remove unnecessarily stringent URL mask on the redirect URL option

• Complete rewrite!
• New: Limit dashboard access for Admins only or by capability
• New: Allow/disallow edit-profile access
• New: Choose your own redirect URL
• New Filter: rda_default_access_cap - Change default access capability
• New Filter: rda_toolbar_nodes - Filter which back-end Toolbar nodes are hidden
• New Filter: rda_frontend_toolbar_nodes - Filter which front-end Toolbar nodes are hidden

• Refined DOING_AJAX check for logged-out users, props @nacin and @BoiteAWeb

• Changed cap to manage_options, replaced PHP_SELF with DOING_AJAX

• Replaced preg_match with admin-ajax test. Added compatibility with rewritten dashboard URLs.

• Submitted to repository