User Role Editor

Any user role can be changed, except for the administrator.

Perfect for blogs/sites with large user bases and a multitude of user groups.

Installation:

Unpack and upload it to the /wp-content/plugins/ directory.
Activate the plugin through the 'Plugins' menu in WordPress.

What is new in this release:

• New option "Edit user capabilities" was added. If it is unchecked - capabilities section of selected user will be shown in the readonly mode. Administrator (except superadmin for multisite) can not assign capabilities to the user directly. He should make it using roles only.
• More universal checking applied to the custom post type capabilities creation to exclude not existing property notices.
• Multisite: URE's options page is prohibited by 'manage_network_users' capability instead of 'ure_manage_options' in case single site administrators does not have permission to use URE.
• URE protects administrator user from editing by other users by default. If you wish to turn off such protection, you may add filter 'ure_supress_administrators_protection' and return 'true' from it.
• Plugin installation to the WordPress multisite with large (thousands) subsites had a problem with script execution time. Fixed. URE does not try to update all subsites at once now. It does it for every subsite separately, only when you visit that subsite.
• Fixed JavaScript bug with 'Reset Roles' for FireFox v.34.

What is new in version 4.18.3:

• New option "Edit user capabilities" was added. If it is unchecked - capabilities section of selected user will be shown in the readonly mode. Administrator (except superadmin for multisite) can not assign capabilities to the user directly. He should make it using roles only.
• More universal checking applied to the custom post type capabilities creation to exclude not existing property notices.
• Multisite: URE's options page is prohibited by 'manage_network_users' capability instead of 'ure_manage_options' in case single site administrators does not have permission to use URE.
• URE protects administrator user from editing by other users by default. If you wish to turn off such protection, you may add filter 'ure_supress_administrators_protection' and return 'true' from it.
• Plugin installation to the WordPress multisite with large (thousands) subsites had a problem with script execution time. Fixed. URE does not try to update all subsites at once now. It does it for every subsite separately, only when you visit that subsite.
• Fixed JavaScript bug with 'Reset Roles' for FireFox v.34.

What is new in version 4.18.1:

• As activation hook does not fire during bulk plugins update, automatic plugin version check and upgrade execution were added.

What is new in version 4.17.1:

• Bug fix for the PHP Fatal error: Call to undefined function is_plugin_active_for_network().

What is new in version 4.15:

• Rename role button was added to the URE toolbar.

What is new in version 4.14:

• Persian translation was added.

What is new in version 4.11:

• Plugin uses for dialogs jQuery UI CSS included into WordPress package.

What is new in version 4.9:

• New tab "Default Roles" was added to the User Role Editor settings page. It is possible to select multiple default roles to assign them automatically to the new registered user.
• CSS and dialog windows layout various enhancements.

What is new in version 4.8:

• Role ID validation rule was added to prohibit numeric role ID - WordPress does not support them.
• Plugin "Options" page was divided into sections (tabs): General, Multisite, About. Section with information about plugin author, his site, etc. was moved from User Role Editor main page to its "Options" page - "About" tab.
• HTML markup was updated to provide compatibility with upcoming WordPress 3.8 new administrator backend theme "MP6".
• Restore previous blog 'switch_to_blog($old_blog_id)' call was replaced to 'restore_current_blog()' where it is possible to provide better compatibility with WordPress API. After use 'switch_to_blog()' in cycle, URE clears '_wp_switched_stack' global variable directly instead of call 'restore_current_blog()' inside the cycle to work faster.

What is new in version 4.7:

• Delete Role" menu has "Delete All Unused Roles" menu item now.
• More detailed warning was added before fulfill "Reset" roles command in order to reduce accident use of this critical operation.
• Bug was fixed at Ure_Lib::reset_user_roles() method. Method did not work correctly for the rest sites of the network except the main blog.

What is new in version 4.6:

• On screen help was added to the "User Role Editor Options" page - click "Help" at the top right corner to read it.
• Bug fix: turning off capability at the Administrator role fully removed that capability from capabilities list.
• Various internal code enhancements.

What is new in version 4.5.2:

• Bug fixed - custom capabilities was not shown in User capabilities editor in some cases.
• Spanish translation was added.

What is new in version 4.5.1:

• Bug with multi-site super-admin access to the User Role Editor is fixed.

What is new in version 4.5:

• Added Hebrew translation.

What is new in version 4.4:

• Bug fixed which prevented creation of current roles backup record during User Role Editor plugin installation and produced unexpected output (PHP notices).

What is new in version 4.3:

• Multisite update: roles from the main (1st) blog are copied to the new added blog automatically, even new site is added from front-end after new user registration, e.g. Gravity Forms "Register User" addon does. Earlier this feature worked for administrator back-end operations only.
• Bug prevented to apply role changes to all sites of the network is fixed. In case when one of the sites have exactly the same roles as applied from the main site, MySQL returned 0 rows affected. URE recognized that as error and stopped further network updated. It is fixed now.
• Bug prevented to save empty (without capabilities) role is fixed.

What is new in version 4.1.1:

• Limitation when user with 'Administrator' role could not edit/delete other users with 'Administrator' role is removed.
• "Apply to All sites" checkbox is excluded from "Select All" operation.
• Quick filter is added to the user's capabilities edit form. Capabilities selection buttons work is fixed after that.

What is new in version 4.1:

• Class property and method access modifiers fatal errors were fixed.

What is new in version 4.0:

• Added integration with the Gravity Forms plugin. User Role Editor shows Gravity Forms user capabilities at the custom capabilities section.
• Code is fully restructured and encapsulated to PHP classes. Internal global variables are not in use anymore.

What is new in version 3.14:

• General code cleanup and security enhancements: all data changes request are processed via POST instead of GET now. So its more difficult to send modified malicious request without special software. Presence of special nonce field is checked for all requests.
• Setting up the 'administrator' role as default one for new registered users is prohibited at server side.
• JavaScript code separated from PHP one whenever it's possible.

What is new in version 3.12.1:

• "Apply to All Sites" feature did not work at version 3.12. It is fixed.
• "Apply to All Sites" feature is available now from main site of the network only.

What is new in version 3.12:

• WordPress built-in constants, like WP_PLUGIN_URL are not used in order to provide compatibility with sites which use SSL. plugin_dir_url(), plugin_dir_path() functions are used to define paths to the plugin's files instead.
• "Greetings" section is removed from the plugin's main page. All that content is still available at plugin page

What is new in version 3.10:

• Critical bug fix:
• Hidden deprecated WordPress core capabilities had turned on after any update made to the role.

What is new in version 3.9:

• Compatibility with bbPress 2.2 new user roles model is provided.

What is new in version 3.8.2:

• Traditional Chinese translation added.

What is new in version 3.8.1:

• Serbian translation added.

What is new in version 3.8:

• WordPress core capabilities are shown separately from capabilities added by plugins and manually.
• Brasilian Portuguese translation is updated.

What is new in version 3.7.5:

• Polish translation is updated.

What is new in version 3.7.2:

• An SQL-injection vulnerability was found and fixed.

What is new in version 3.7:

• 'Select All', 'Unselect All', 'Inverse' buttons were added to the from for more convenient capabilities management while role editing.
• Role and capability name could be started from digit, and underscore '_' character. Hyphen '-' character could be included into such name too.

What is new in version 3.6.2:

• Hindi translation is added.

What is new in version 3.6.1:

• Italian translation is updated.

What is new in version 3.6:

• CSS and page layout fix for compatibility with WordPress 3.4.
• WordPress multi-site: when new blog created default role setting is copied for it from the main blog default role value now.

What is new in version 3.5.4:

• Lithuanian translation.
• Spanish translation (updated).

Requirements:

• WordPress 4 or higher