About this plugin
WPSwings Role Permission Editor is a comprehensive WordPress user role and capability management plugin that consolidates functionality from multiple legacy role editors into a single, modern, React-powered interface.
Core Features
- Visual Capability Matrix – Edit role capabilities with an intuitive grid interface
- Per-User Capability Overrides – Grant or deny specific capabilities to individual users
- Audit Log – Track all role and capability changes with detailed history
- JSON Import/Export – Backup and restore role configurations
- Template System – Predefined role templates for common use cases
- Snapshot & Restore – Create point-in-time backups of your role configuration
Access Control Features
- REST API Route Permissions – Control access to WordPress REST API endpoints
- Admin Menu Restrictions – Show/hide admin menu items by role
- Widget Restrictions – Control widget visibility by role
- Metabox Restrictions – Show/hide metaboxes based on user role
- Content Restrictions – Restrict post/page content by role with shortcodes and blocks
- Plugin Permissions – Control which roles can manage specific plugins
- Form Restrictions – Role-based form access control
Multisite Network Support
- Network-wide role management – Manage roles across all sites in a network
- Site-specific overrides – Allow individual sites to customize network roles
- Bulk synchronization – Sync role configurations across all network sites
AI-Powered Features (Optional)
0):
- Natural Language Role Builder – Create roles from plain-language descriptions
- Audit Log Summaries – AI-generated digests of role/capability changes
- Capability Explanations – Understand orphaned capabilities from deactivated plugins
- Permission Anomaly Detection – AI-enhanced security analysis of role configurations
0+ and a configured AI provider in WordPress Settings → AI. The plugin does not directly call external AI services.
External Services & Privacy
WordPress AI Client API
0+) to provide AI-powered features:
- What data is sent: When AI features are enabled, the plugin sends role/capability metadata, audit log entries, and permission configurations to the AI provider configured in WordPress Settings → AI
- When data is sent: Only when you actively use AI features (natural language role builder, audit digest generation, capability explanations, anomaly detection)
- External communication: The plugin does NOT directly communicate with external AI services. All external AI communication is managed by WordPress core based on your site-level AI provider configuration
- Data retention: Data handling and retention policies depend on the AI provider you configure (Anthropic, OpenAI, etc.). Refer to your chosen provider’s privacy policy
- Opting out: AI features are disabled by default and can be toggled on/off in Settings → AI
No Other External Services
This plugin does not make any other external HTTP requests or connect to third-party services beyond the WordPress AI Client API integration described above.