Title: Qaiyo Access Manager
Author: qaiyo
Published: <strong>16.06.2026</strong>
Last modified: 16.06.2026

---

Поиск плагинов

![](https://ps.w.org/qaiyo-access-manager/assets/icon-256x256.png?rev=3574138)

# Qaiyo Access Manager

 Автор: [qaiyo](https://profiles.wordpress.org/qaiyo/)

[Скачать](https://downloads.wordpress.org/plugin/qaiyo-access-manager.1.0.0.zip)

 * [Детали](https://ru.wordpress.org/plugins/qaiyo-access-manager/#description)
 * [Отзывы](https://ru.wordpress.org/plugins/qaiyo-access-manager/#reviews)
 *  [Установка](https://ru.wordpress.org/plugins/qaiyo-access-manager/#installation)
 * [Разработка](https://ru.wordpress.org/plugins/qaiyo-access-manager/#developers)

 [Поддержка](https://wordpress.org/support/plugin/qaiyo-access-manager/)

## Описание

Qaiyo Access Manager extends WordPress’s built-in permission system. Out of the 
box, WordPress only lets you assign broad roles (editor, author, contributor…). 
This plugin lets administrators set **fine-grained access rules for individual plugins
and custom post types**, at both the role level and the individual user level — 
without writing code or touching `functions.php`.

Hide WooCommerce from editors, give a single freelancer access to one custom post
type, stop contributors from seeing a page builder, redirect each role to its own
landing page after login, or protect a block of content on the front end with a 
shortcode. Administrators always keep full access and can never be locked out.

**Plugin & content access**

 * **Plugin-level access control** — Decide which roles can see and manage each 
   installed plugin on the Plugins screen.
 * **Custom post type access control** — Restrict any custom post type (WooCommerce
   Products, ACF field groups, portfolios, events…) per role, in wp-admin, on the
   front end and through the REST API.
 * **Allow / Deny mode per rule** — Each rule can either allow only the checked 
   roles, or deny the checked roles and leave everyone else untouched — whichever
   needs fewer clicks.
 * **User-level overrides** — Allow or deny a specific user regardless of their 
   role. User rules always win over role rules.
 * **Access Matrix** — A bird’s-eye grid of every plugin and post type against every
   role, so you can audit your whole site at a glance.
 * **Native capability hints** — Next to each plugin and post type, see which roles
   already hold the relevant WordPress capabilities, so your rules and core roles
   never silently conflict.

**Roles, login & front end**

 * **Login redirect by role** — Send each role to its own URL right after login.
 * **Restricted content redirect** — Choose where logged-in users land when they
   open a single item of a content type they cannot access (home, 404, login or 
   a custom URL).
 * **Frontend protection shortcode** — `[qaiyo_protect role="editor" deny="subscriber"
   logged_in="yes" cap="edit_posts"]…[/qaiyo_protect]` shows or hides content by
   role, login state or capability, with an optional replacement message.
 * **Customizable restricted notice** — Pick the style (info / warning / error /
   none) and text shown to restricted users, with `{user_name}`, `{site_name}` and`{
   admin_email}` placeholders.

**Admin experience**

 * **Capabilities inspector** — A read-only, searchable capability × role matrix
   that flags core vs plugin capabilities. It never changes your roles — it just
   shows you what they already hold.
 * **Dashboard summary widget** — A WordPress Dashboard widget showing how many 
   plugins and post types are restricted and how many user-level overrides are active,
   for an at-a-glance health check.
 * **Hide the admin bar** — Remove the frontend toolbar for selected roles.
 * **Hide individual admin bar items** — Strip specific nodes from the top toolbar
   per role.
 * **Hide dashboard widgets** — Remove dashboard widgets per role.
 * **Update permissions** — Let non-admin roles update plugins and/or themes without
   granting full administrator access (applied at runtime, fully reversible).
 * **JSON import / export** — Back up every rule to a JSON file, or migrate your
   whole configuration to another site.
 * **Explore Qaiyo plugins** — An in-admin overview of the Qaiyo plugin family, 
   with a notice on your Qaiyo screens when a newer version of an installed Qaiyo
   plugin is available.

**Built for the real world**

 * **Administrators are protected** — Anyone with `manage_options` always has full
   access and cannot be restricted.
 * **AJAX save** — Rules are saved without a page reload.
 * **Translation ready** — Ships with 11 languages: English, Hungarian, German, 
   French, Spanish, Japanese, Portuguese, Italian, Russian, Turkish and Polish.
 * **Translation-plugin compatible** — Plays nicely with WPML, Polylang and TranslatePress;
   internal translation post types are excluded automatically.
 * **WordPress standards** — Nonce verification, capability checks, sanitized input
   and escaped output throughout.

**Looking for more?** Qaiyo Access Manager Pro adds an editable click-to-toggle 
matrix, rule presets, user groups, bulk actions, temporary (time-limited) access,
an activity log, admin page hiding, meta box control and email notifications.

## Скриншоты

[⌊Plugin access rules per role, with Allow/Deny mode and user-level overrides.⌉⌊
Plugin access rules per role, with Allow/Deny mode and user-level overrides.⌉[

Plugin access rules per role, with Allow/Deny mode and user-level overrides.

[⌊Custom post type access control.⌉⌊Custom post type access control.⌉[

Custom post type access control.

[⌊The Access Matrix — every plugin and post type against every role.⌉⌊The Access
Matrix — every plugin and post type against every role.⌉[

The Access Matrix — every plugin and post type against every role.

[⌊The read-only Capabilities inspector.⌉⌊The read-only Capabilities inspector.⌉[

The read-only Capabilities inspector.

[⌊Settings: restricted notice, login redirects, admin-bar and dashboard options.⌉⌊
Settings: restricted notice, login redirects, admin-bar and dashboard options.⌉[

Settings: restricted notice, login redirects, admin-bar and dashboard options.

## Установка

 1. Upload the `qaiyo-access-manager` folder to `/wp-content/plugins/`, or install 
    it from the Plugins  Add New screen.
 2. Activate the plugin from the WordPress admin Plugins page.
 3. Open **Access Manager** in the admin sidebar.
 4. Use the Plugins and Post Types tabs to set role and user-level rules, and the Settings
    tab for login redirects, the restricted notice and admin-bar options.

## Часто задаваемые вопросы

### What happens if no roles are assigned to a plugin or CPT?

It stays accessible to everyone. Rules are opt-in: an item is only restricted once
you add a rule for it.

### Can administrators be restricted?

No. Anyone with the `manage_options` capability always keeps full access, by design,
so you can never lock yourself out.

### How does the user-level override work?

User rules take priority over role rules. A denied user cannot access the item even
if their role is allowed, and an allowed user can access it even if their role is
not.

### What is the difference between Allow and Deny mode?

Allow mode means only the checked roles get access. Deny mode means the checked 
roles lose access and everyone else keeps it. Pick whichever is fewer clicks for
your situation.

### How do I protect content on the front end?

Use the shortcode, for example: `[qaiyo_protect role="editor,shop_manager"]Visible
only to these roles.[/qaiyo_protect]`. Combine the attributes `role` (allow list),`
deny` (deny list), `logged_in` (yes/no), `cap` (a capability) and `message` (text
shown instead when the content is hidden).

### Does the Capabilities tab change my roles?

No. It is a read-only inspector. Editing capabilities is intentionally out of scope
so WordPress’s core role system stays untouched.

### Will restricting a custom post type also block it on the front end and in the REST API?

Yes. CPT rules are enforced in wp-admin, on single front-end views (with a configurable
redirect) and through the REST API.

### Is it compatible with WPML, Polylang and TranslatePress?

Yes. The plugin excludes the internal post types used by translation plugins and
does not interfere with language-based content filtering.

### What happens when the plugin is uninstalled?

By default your rules are preserved so they return if you reinstall. You can opt
in (Settings  Tools) to delete all rules and settings on uninstall instead.

## Отзывы

Нет отзывов об этом плагине.

## Участники и разработчики

«Qaiyo Access Manager» — проект с открытым исходным кодом. В развитие плагина внесли
свой вклад следующие участники:

Участники

 *   [ qaiyo ](https://profiles.wordpress.org/qaiyo/)

«Qaiyo Access Manager» переведён на 1 язык. Благодарим [переводчиков](https://translate.wordpress.org/projects/wp-plugins/qaiyo-access-manager/contributors)
за их работу.

[Перевести «Qaiyo Access Manager» на ваш язык.](https://translate.wordpress.org/projects/wp-plugins/qaiyo-access-manager)

### Заинтересованы в разработке?

[Посмотрите код](https://plugins.trac.wordpress.org/browser/qaiyo-access-manager/),
проверьте [SVN репозиторий](https://plugins.svn.wordpress.org/qaiyo-access-manager/),
или подпишитесь на [журнал разработки](https://plugins.trac.wordpress.org/log/qaiyo-access-manager/)
по [RSS](https://plugins.trac.wordpress.org/log/qaiyo-access-manager/?limit=100&mode=stop_on_copy&format=rss).

## Журнал изменений

#### 1.0.0

 * Initial release.
 * Plugin-level access control per role.
 * Custom post type access control per role (wp-admin, front end and REST API).
 * Allow / Deny mode for every rule.
 * User-level overrides (allow/deny per user), taking priority over role rules.
 * Access Matrix overview of every plugin and post type against every role.
 * Read-only Capabilities inspector (core vs plugin capabilities flagged).
 * Native capability hints shown next to each plugin and post type.
 * Dashboard summary widget (restricted plugins / post types / active user overrides).
 * `[qaiyo_protect]` frontend content protection shortcode (role / deny / logged_in/
   cap / message).
 * Login redirect by role.
 * Restricted content frontend redirect (home / 404 / login / custom URL).
 * Customizable restricted-access notice (style + text with placeholders).
 * Hide the frontend admin bar, individual admin bar items and dashboard widgets
   per role.
 * Plugin / theme update permissions for non-admin roles (runtime, reversible).
 * JSON import / export of all rules.
 * «Explore Qaiyo plugins» overview with update notices for installed Qaiyo plugins.
 * 11 bundled languages: English, Hungarian, German, French, Spanish, Japanese, 
   Portuguese, Italian, Russian, Turkish, Polish.
 * Compatible with WPML, Polylang and TranslatePress.

## Мета

 *  Версия **1.0.0**
 *  Обновление: **11 часов назад**
 *  Активных установок: **Менее 10**
 *  Версия WordPress ** 5.8 или выше **
 *  Совместим вплоть до: **7.0**
 *  Версия PHP ** 7.4 или выше **
 *  Языки
 * [English (US)](https://wordpress.org/plugins/qaiyo-access-manager/) и [Russian](https://ru.wordpress.org/plugins/qaiyo-access-manager/).
 *  [Перевести на ваш язык](https://translate.wordpress.org/projects/wp-plugins/qaiyo-access-manager)
 * Метки:
 * [access-control](https://ru.wordpress.org/plugins/tags/access-control/)[cpt](https://ru.wordpress.org/plugins/tags/cpt/)
   [permissions](https://ru.wordpress.org/plugins/tags/permissions/)[roles](https://ru.wordpress.org/plugins/tags/roles/)
   [user management](https://ru.wordpress.org/plugins/tags/user-management/)
 *  [Дополнительно](https://ru.wordpress.org/plugins/qaiyo-access-manager/advanced/)

## Оценки

Пока что нет ни одного отзыва.

[Your review](https://wordpress.org/support/plugin/qaiyo-access-manager/reviews/#new-post)

[Посмотреть всеотзывы](https://wordpress.org/support/plugin/qaiyo-access-manager/reviews/)

## Участники

 *   [ qaiyo ](https://profiles.wordpress.org/qaiyo/)

## Поддержка

Есть что сказать? Нужна помощь?

 [Перейти в форум поддержки](https://wordpress.org/support/plugin/qaiyo-access-manager/)