wordpress角色权限汇总

我们在用wordpress开发的时候有时候需要设置不同的用户组及权限，具体有哪些角色权限呢？随ytkah一起来看看吧。WordPress使用了角色的概念，旨在让站点所有者能够控制用户在站点中可以做什么和不能做什么。通过为每个用户分配特定的角色，站点所有者可以管理用户对诸如撰写和编辑文章、创建页面、创建类别、审核评论、管理插件、管理主题和管理其他用户等任务的访问。

wordpress角色权限详细列表

各权限拥有的能力

Capabilities #Capabilities

switch_themes #switch_themes Since 2.0 Allows access to Administration Screens options: Appearance Appearance > Themes

edit_themes #edit_themes Since 2.0 Allows access to Appearance > Theme Editor to edit theme files.

edit_theme_options #edit_theme_options Since 3.0 Allows access to Administration Screens options: Appearance > Widgets Appearance > Menus Appearance > Customize if they are supported by the current theme Appearance > Header

install_themes #install_themes Since 2.8 Allows access to Administration Screens options: Appearance > Add New Themes

activate_plugins #activate_plugins Since 2.0 Allows access to Administration Screens options: Plugins

edit_plugins #edit_plugins Since 2.0 Allows access to Administration Screens options: Plugins > Plugin Editor

install_plugins #install_plugins Since 2.7 Allows access to Administration Screens options: Plugins > Add New

edit_users #edit_users Since 2.0 Allows access to Administration Screens options: Users

edit_files #edit_files Since 2.0 Note: No longer used.

manage_options #manage_options Since 2.0 Allows access to Administration Screens options: Settings > General Settings > Writing Settings > Reading Settings > Discussion Settings > Permalinks Settings > Miscellaneous

moderate_comments #moderate_comments Since 2.0 Allows users to moderate comments from the Comments Screen (although a user needs the edit_posts Capability in order to access this)

manage_categories #manage_categories Since 2.0 Allows access to Administration Screens options: Posts > Categories Links > Categories

manage_links #manage_links Since 2.0 Allows access to Administration Screens options: Links Links > Add New

upload_files #upload_files Since 2.0 Allows access to Administration Screens options: Media Media > Add New

import #import Since 2.0 Allows access to Administration Screens options: Tools > Import Tools > Export

unfiltered_html #unfiltered_html Since 2.0 Allows user to post HTML markup or even JavaScript code in pages, posts, comments and widgets. Note: Enabling this option for untrusted users may result in their posting malicious or poorly formatted code. Note: In WordPress Multisite, only Super Admins have the unfiltered_html capability.

edit_posts #edit_posts Since 2.0 Allows access to Administration Screens options: Posts Posts > Add New Comments Comments > Awaiting Moderation

edit_others_posts #edit_others_posts Since 2.0 Allows access to Administration Screens options: Manage > Comments (Lets user delete and edit every comment, see edit_posts above) user can edit other users’ posts through function get_others_drafts() user can see other users’ images in inline-uploading [no? see inline-uploading.php] See Exceptions

edit_published_posts #edit_published_posts Since 2.0 User can edit their published posts. This capability is off by default. The core checks the capability edit_posts, but on demand this check is changed to edit_published_posts. If you don’t want a user to be able to edit their published posts, remove this capability.

publish_posts #publish_posts Since 2.0 See and use the “publish” button when editing their post (otherwise they can only save drafts) Can use XML-RPC to publish (otherwise they get a “Sorry, you can not post on this weblog or category.”)

edit_pages #edit_pages Since 2.0 Allows access to Administration Screens options: Pages Pages > Add New

read #read Since 2.0 Allows access to Administration Screens options: Dashboard Users > Your Profile Used nowhere in the core code except the menu.php

publish_pages #publish_pages Since 2.1

edit_others_pages #edit_others_pages Since 2.1

edit_published_pages #edit_published_pages Since 2.1

delete_pages #delete_pages Since 2.1

delete_others_pages #delete_others_pages Since 2.1

delete_published_pages #delete_published_pages Since 2.1

delete_posts #delete_posts Since 2.1

delete_others_posts #delete_others_posts Since 2.1

delete_published_posts #delete_published_posts Since 2.1

delete_private_posts #delete_private_posts Since 2.1

edit_private_posts #edit_private_posts Since 2.1

read_private_posts #read_private_posts Since 2.1

delete_private_pages #delete_private_pages Since 2.1

edit_private_pages #edit_private_pages Since 2.1

read_private_pages #read_private_pages Since 2.1

delete_users #delete_users Since 2.1

create_users #create_users Since 2.1 Allows creating new users. Without other capabilities, created users will have your blog’s New User Default Role.

unfiltered_upload #unfiltered_upload Since 2.3

edit_dashboard #edit_dashboard Since 2.5

customize #customize Since 4.0 Allows access to the Customizer.

delete_site #delete_site Since 4.0 Allows the user to delete the current site (Multisite only).

update_plugins #update_plugins Since 2.6

delete_plugins #delete_plugins Since 2.6

update_themes #update_themes Since 2.7

update_core #update_core Since 3.0

list_users #list_users Since 3.0 Allows access to Administration Screens options: Users

remove_users #remove_users Since 3.0

add_users #add_users Since 3.0 Replaced in 4.4 with promote_users

promote_users #promote_users Since 3.0 Enables the “Change role to…” dropdown in the admin user list. This does not depend on ‘edit_users‘ capability. Enables the ‘Add Existing User’ to function for multi-site installs.

delete_themes #delete_themes Since 3.0

export #export Since 3.0

edit_comment #edit_comment Since 3.1

create_sites #create_sites Since 3.1 Multi-site only Allows user to create sites on the network

delete_sites #delete_sites Since 3.1 Multi-site only Allows user to delete sites on the network

manage_network #manage_network Since 3.0 Multi-site only Allows access to Super Admin menu Allows user to upgrade network

manage_sites #manage_sites Since 3.0 Multi-site only Allows access to Network Sites menu Allows user to add, edit, delete, archive, unarchive, activate, deactivate, spam and unspam new site/blog in the network

manage_network_users #manage_network_users Since 3.0 Multi-site only Allows access to Network Users menu

manage_network_themes #manage_network_themes Since 3.0 Multi-site only Allows access to Network Themes menu

manage_network_options #manage_network_options Since 3.0 Multi-site only Allows access to Network Options menu

manage_network_plugins #manage_network_plugins Multi-site only Allows access to Network Plugins menu

upload_plugins #upload_plugins Since 4.0 Multi-site only Allows user to upload plugin ZIP files from the Network Plugins -> Add New menu

upload_themes #upload_themes Since 4.0 Multi-site only Allows user to upload theme ZIP files from the Network Themes -> Add New menu

upgrade_network #upgrade_network Since 4.8 Multi-site only is used to determine whether a user can access the Network Upgrade page in the network admin. Related to this, the capability is also checked to determine whether to show the notice that a network upgrade is required. The capability is not mapped, so it is only granted to network administrators. See #39205 for background discussion.

setup_network #setup_network Since 4.8 Multi-site only is used to determine whether a user can setup multisite, i.e. access the Network Setup page. Before setting up a multisite, the capability is mapped to the `manage_options` capability, so that it is granted to administrators. Once multisite is setup, it is mapped to `manage_network_options`, so that it is granted to network administrators. See #39206 for background discussion.

参考资料：https://wordpress.org/support/article/roles-and-capabilities/