Skip to content

Version 1.2.3 - Granular User Permissions.

Choose a tag to compare

View all tags
@istefan istefan released this 07 Oct 11:18
· 4 commits to main since this release
v1.2.3
c73e4c0

Enhancements & Security Refinements

This release introduces a more refined and secure permission system for the user management endpoints, establishing a clear hierarchy between 'Manager' and 'Administrator' roles.

  • New manage_api_users Capability: A new capability has been added to explicitly grant user management permissions via the API, decoupling it from WordPress's default role hierarchy.
  • Role-Based Restrictions:
    • Managers can now create, view, and edit other users (excluding administrators).
    • User Deletion is now restricted to Administrators only for enhanced security.
  • Filtered Roles List: The /roles endpoint now intelligently filters the list of roles. Managers will only see custom-defined roles, while Administrators can see all roles, preventing accidental assignment of high-level permissions.
Assets 2
Loading