WordPress Users, Permissions and Capabilities: Managing Access as Your WP Site Grows

If you've got more than one person logging into your site for content, commerce, or classes, understanding the different WordPress user roles and permissions in WordPress is critical for your site's security. On Wordfence Live, we're covering WordPress roles and user permissions, capabilities and the different roles a user can have. Whether you're starting a new site or your site is growing, understanding access controls gives you a foundation for site security as your site grows.

User roles are important for all kinds of WordPress sites including sites using learning management systems, WooCommerce, membership sites, or even WordPress-based publications like ezines.

---------------------------------------------------------

Wordfence is offering free site security audits and site cleanings for K-12 schools worldwide.
https://www.wordfence.com/blog/2021/01/announcing-free-site-cleaning-site-security-audits-for-k-12-public-schools/
---------------------------------------------------------
Have you tried Wordfence Central yet?
https://www.wordfence.com/try-central/
---------------------------------------------------------
Check out Wordfence Central Teams! You can use Wordfence Central with your Premium AND Wordfence free sites, all for free.
https://www.wordfence.com/blog/2020/10/introducing-wordfence-central-teams/
---------------------------------------------------------
Check out Fast or Slow, the only free website speed profiler that tests your site from 18 locations worldwide.
https://www.fastorslow.com
---------------------------------------------------------
Sign up for the Wordfence WordPress Security mailing list. Be the first to know when there is a vulnerability in a plugin or theme you might be using.
https://www.wordfence.com/subscribe-to-the-wordfence-email-list/
---------------------------------------------------------
The Wordfence Learning Center has all you need to brush up on WordPress security and more:
https://www.wordfence.com/learn/
---------------------------------------------------------
Wordfence is the most popular choice of WordPress professionals for WordPress security. We have a number of security tutorials on our YouTube channel, including Wordfence tutorials. Wordfence security plugin is the number one choice in WordPress security plugins.
---------------------------------------------------------
Follow us on Twitter:
https://www.twitter.com/wordfence
https://www.twitter.com/ramuelgall
https://www.twitter.com/wfscottmiller
---------------------------------------------------------
Listen to the Think Like a Hacker Podcast
https://www.wordfence.com/podcast/
---------------------------------------------------------
#wordfence #wordpress #security
---------------------------------------------------------
0:00 Introduction
1:08 It's March already, and Wordfence is hiring!
1:55 Episode overview
4:40 Chloe’s professional journey at Wordfence
6:00 Benefits working at Wordfence
6:38 Positions available at Wordfence
10:14 SWAG question: What is the difference between the editor and author role in WordPress?
11:30 Introduction to access control
13:14 Types of access control - administrative access control, physical access control, Technical access control
15:34 Common access control models: Discretionary access control, mandatory access control, rule-based access controls, role-based access control (RBAC)
22:22 Why is understanding access control important?
28:47 What are user roles and capabilities?
29:14 What is a capability?
29:43 What is a role?
35:18 WordPress roles & capabilities: https://wordpress.org/support/article/roles-and-capabilities/
36:16 Some plugins add custom roles. WooCommerce, BuddyPress, BBPress, Tutor LMS, and BackWPup
37:53 Swag winners
38:50 Best Practices to follow when determining how to assign roles and manage access.
38:58 Principle of least privilege
41:42 Dual account control
43:31 Separation of duties
45:41 Need-to-Know
46:22 Avoiding privilege creep
47:23 Swag question answers
48:32 Chloe demos how to use User Role Editor Plugin https://wordpress.org/plugins/user-role-editor/
54:39 For developers: Securing your plugins with the appropriate capability checks.
57:15 Thanks to Wordfence Premium users
57:21 Fast or Slow, Wordfence Central
1:00:17 New Podcast on “Think Like a Hacker”
1:01:25 Billie Bad Wolf Piper Resume