WPSwings Role Permission Editor

WPSwings Role Permission Editor is a comprehensive WordPress user role and capability management plugin that consolidates functionality from multiple legacy role editors into a single, modern, React-powered interface.

Core Features

• Visual Capability Matrix – Edit role capabilities with an intuitive grid interface
• Per-User Capability Overrides – Grant or deny specific capabilities to individual users
• Audit Log – Track all role and capability changes with detailed history
• JSON Import/Export – Backup and restore role configurations
• Template System – Predefined role templates for common use cases
• Snapshot & Restore – Create point-in-time backups of your role configuration

Access Control Features

• REST API Route Permissions – Control access to WordPress REST API endpoints
• Admin Menu Restrictions – Show/hide admin menu items by role
• Widget Restrictions – Control widget visibility by role
• Metabox Restrictions – Show/hide metaboxes based on user role
• Content Restrictions – Restrict post/page content by role with shortcodes and blocks
• Plugin Permissions – Control which roles can manage specific plugins
• Form Restrictions – Role-based form access control

Multisite Network Support

• Network-wide role management – Manage roles across all sites in a network
• Site-specific overrides – Allow individual sites to customize network roles
• Bulk synchronization – Sync role configurations across all network sites

AI-Powered Features (Optional)

This plugin includes optional AI features that leverage WordPress core’s AI Client API (available since WordPress 7.0):

• Natural Language Role Builder – Create roles from plain-language descriptions
• Audit Log Summaries – AI-generated digests of role/capability changes
• Capability Explanations – Understand orphaned capabilities from deactivated plugins
• Permission Anomaly Detection – AI-enhanced security analysis of role configurations

Note: AI features require WordPress 7.0+ and a configured AI provider in WordPress Settings → AI. The plugin does not directly call external AI services.

External Services & Privacy

WordPress AI Client API

This plugin optionally uses WordPress core’s AI Client API (WordPress 7.0+) to provide AI-powered features:

• What data is sent: When AI features are enabled, the plugin sends role/capability metadata, audit log entries, and permission configurations to the AI provider configured in WordPress Settings → AI
• When data is sent: Only when you actively use AI features (natural language role builder, audit digest generation, capability explanations, anomaly detection)
• External communication: The plugin does NOT directly communicate with external AI services. All external AI communication is managed by WordPress core based on your site-level AI provider configuration
• Data retention: Data handling and retention policies depend on the AI provider you configure (Anthropic, OpenAI, etc.). Refer to your chosen provider’s privacy policy
• Opting out: AI features are disabled by default and can be toggled on/off in Settings → AI

No Other External Services

This plugin does not make any other external HTTP requests or connect to third-party services beyond the WordPress AI Client API integration described above.

Building From Source

This plugin includes compiled JavaScript assets in admin/build/. The human-readable source code is available in admin/src/.

Build Requirements

• Node.js 16+ and npm
• The plugin uses Vite for building React components

Build Steps

1. Navigate to the admin/ directory
2. Install dependencies: npm install
3. Build for production: npm run build
4. Development mode with hot reload: npm run dev

The build process compiles React/JSX source files from admin/src/ into bundled JavaScript and CSS in admin/build/.