Tagged: Security
What is the best practice for giving a third party developer access to your site in order for them to make changes/updates?
1. Specifically, what user type/role (i.e., Administrator, Subscriber, Contributor, Author, Editor, No role) should they have?
2. Is there a way to restrict the developer to just the one page that needs editing, or will they have edit access to all pages?
Thank you.
Hey Starkos,
Thanks for getting in touch with us!
1. The role of the developer would depend on what exactly he is going to change/update. He needs to be either an editor or administrator. If he only needs access to pages and not plugins or anything else then he could just be an editor.
2. He will have access to all pages to edit whether or not his role is editor or administrator. This plugin may be useful if you need to set those restrictions – https://wordpress.org/plugins/user-access-manager/
Best regards,
Jordan
Great, thank you!
Hey!
There are also plugins, like wpMaintainer that allow you to create a ” client ” plugin, add it to client site, and then remote login to client site.
Client can control, for how long he wants the admin to be able to login.
Please let us know if you have any more questions, will be happy to assist.
Regards,
Basilis
Thank you. I searched for that plugin, but didn’t find the exact result. Is there a different name possibly? Screenshot in private content.
Hi,
I think this is what Basilis was referring to: https://wpmaintainer.com/. I’m not familiar with it myself though.
Best regards,
Rikard