About this plugin
JMDL Booking Role Access Manager provides a central role-based access screen for WordPress administrators.
It can control:
- WordPress admin top-level menus and submenus.
- Runtime WordPress and plugin capabilities without rewriting stored role capabilities.
- Per-role login and logout redirects.
- Amelia admin menu visibility and read-only access when Amelia is detected.
- YITH Booking internal panel navigation when YITH Booking and Appointment for WooCommerce is detected.
- Optional Amelia Manager compatibility for roles that need broader Amelia record visibility.
- Emergency safe mode and per-role configuration backups.
The plugin does not create, update, or delete booking, appointment, order, customer, payment, or booking-table records. Menu hiding is an interface control; capability and read-only controls should be used when direct access must also be restricted.
This plugin is independently developed and is not affiliated with or endorsed by Amelia or YITH. Product names are used only to describe optional compatibility.
Security and data safety
- Settings forms require administrator capability checks and WordPress nonces.
- Redirects are restricted to same-site destinations.
- Capability policies are applied at runtime instead of rewriting WordPress role capability records.
- Compatibility-role ownership is tracked per user so the plugin removes only roles it added itself.
- User synchronization is role-scoped and batched.
- Empty admin-menu selections fail open instead of hiding the complete WordPress admin sidebar.
- Administrators and multisite super administrators bypass restrictions.
Always test role-access changes on staging before deploying them to a production booking site.
Privacy
This plugin does not send data to external services and does not include analytics or tracking.