Arabdown Permissions

Arabdown Permissions gives you full visual control over what each user role sees inside WordPress, without editing WordPress core capabilities and without writing code. It is RTL-first (built for Arabic) and works with any theme.

Free features

• Admin menu control — hide any menu or submenu from the sidebar per role.
• Plugins screen — hide specific plugins from the Plugins screen per role (visual only; the plugin stays active).
• Dashboard widgets — control dashboard widgets per role.
• Admin Bar — hide specific admin-bar items (WP logo, comments, updates…) or the whole admin bar on the front end, per role.
• Custom roles — create new roles by cloning existing ones, edit their capabilities, and delete safely by moving users to another role.
• Activity log — every sensitive change is logged (who, when, what), with advanced filtering and CSV export.
• Preview as role — preview the site as another role without logging out, with a persistent banner.
• Backup / Restore — export all settings and rules as JSON, then restore or move them to another site.
• Default-safe — first activation hides nothing; every rule is added explicitly. Administrator sees everything by default, and the plugin cannot hide itself (lockout protection).

A note on the separate security add-on

Everything listed above is free and fully functional: nothing in this plugin is limited, time-boxed or locked behind a key.

Advanced security features (two-factor authentication, login protection, time-based access rules, security alerts and emergency access) are developed as a separate commercial plugin. Its code is not part of this download and this plugin contains no licence check, no upgrade prompt and no reference to it in the admin.

بالعربية

عرب داون للصلاحيات: تحكّم بصريّ كامل بما يراه كل دور مستخدم في ووردبريس — إخفاء قوائم لوحة التحكّم، الإضافات، الودجت، وعناصر شريط الأدوات حسب الدور، عبر مفاتيح تبديل وبلا كود. عربيّ وRTL أوّلًا، ويعمل مع أيّ قالب. لا يعدّل صلاحيات ووردبريس الأساسية، والمدير محميّ من الإقفال.

External services

This plugin uses no external or third-party services.

It runs entirely on your own server: it makes no remote HTTP requests of any kind, sends no data anywhere, contacts no licence server, and includes no analytics or tracking. This is verifiable in the source — the package contains no call to wp_remote_* and no external endpoint.