Permission system
Wapi uses a granular permission system. By default, sensitive actions are disabled to protect your site.
Security by default: Potentially dangerous actions are disabled at installation.
Permission categories
Wapi organizes permissions into three main categories based on their risk level. You control what Wapi can do on your site.
Reading
Enabled by defaultView your content without modifying it
- List and view your posts, pages, media
- View your categories, tags, and taxonomies
- Search through your content
- View your list of plugins and themes
Creation and modification
Enabled by defaultCreate and edit content on your site
- Create new posts and pages
- Edit existing content
- Upload and manage media
- Create and edit categories/tags
Sensitive actions
Disabled by defaultPotentially dangerous operations, disabled for your security
- Delete posts and media
- Update your WordPress plugins
- Update your WordPress theme
- Regenerate image thumbnails
Why disabled? These actions can have a significant impact on your site. Enable them only if you want Wapi to be able to perform these operations.
You keep control
Wapi can only perform actions you explicitly authorize. You can modify permissions at any time from your WordPress dashboard.
How to modify permissions
-
1
Access settings
In your WordPress, go to Wapi > Settings
-
2
Configure permissions
Section Security & Permissions : enable or disable the desired categories
-
3
Save
Your preferences take effect immediately
Predefined profiles
The setup wizard offers 3 profiles to get started quickly:
Cautious
Read + create/edit. Sensitive actions disabled.
- ✓ Reading
- ✓ Creation and modification
- ✗ Sensitive actions
Standard
Full content management, without system actions.
- ✓ Reading
- ✓ Creation and modification
- ~ Sensitive actions (except system)
Advanced
All permissions enabled, full control.
- ✓ Reading
- ✓ Creation and modification
- ✓ Sensitive actions
Permissions by WordPress role
The plugin respects WordPress capabilities. Only users with the right permissions can perform certain actions:
| WordPress role | Wapi capabilities |
|---|---|
| Administrator | All actions |
| Editor | Content management (no plugins/themes) |
| Author | Own posts only |
| Contributor | Read only |
Why this permission system?
Wapi respects your site and your sovereignty. Granular permissions allow you to:
Prevent accidental deletions
Control system updates
Enable only what you need
You know exactly what Wapi can do
Tip
Start with the Cautious and gradually enable permissions as needed. It's always safer to add permissions than to remove them after an incident. You can change your preferences at any time.