User Roles

Introduction #

This guide discusses the rights available to users, and how the Local SiteWorks Administrator can add additional users to the system or remove those who may have stepped down.

In this and other guides, the following definitions are used, Users are people who have login access to the WordPress Dashboard, with assigned Roles, and are different to Contacts, who typically lead interest groups, organise meetings and other events, and don’t have login rights, but have details entered into the system to populate contact email address.

The U3a committee must appoint a Local SiteWorks Administrator to manage and maintain the website specific to an individual U3a. This individual MUST not be confused with the System Administrator who manages SiteWorks and its infrastructure.

The System Administrator is a SiteWorks team member responsible for the complete SiteWorks system, including maintenance, handling updates, and hosting. Before the site is released, an administrator called SwDevAdmin is added to allow the SiteWorks team to manage an account (e.g. adding an updated plugin). THIS USER MUST NOT BE DELETED.

While this and other documentation refer to a single Administrator, it is strongly recommended that a u3a has more than one Administrator to ensure resilience in case of illness, holiday, etc. As any user with administrator rights can modify all aspects of a site, it is recommended that a u3a committee limit the number of Administrators.

WordPress has no practical limitations regarding the number of website administrators, editors, and authors assigned to a site..

It should be noted that, in practice, there will be some overlap between users and contacts, they are to be considered separate from the Administrator’s point of view.

Local Administrator. #

When the site is set up, one or more additional “administrators ” are included to allow the test and migration team to support the individual web manager during migration.

An active u3a website requires one active Local Administrator to ensure correct website maintenance. The assigned person can be changed by adding that person as a new user with administrative rights and then deleting the administrator who is standing down. The username and password for the outgoing administrator MUST NOT be passed to a new administrator.

Any Administrator can allow other members of their u3a, to edit or publish pages and posts, by adding them as an Editor or Author. For example, a group leader can add material to their group pages, without sending it to the administrator for editing and publication. This is achieved by adding individuals as Users with the role of Editor.

Adding a New Local Administrator. #

Adding a new administrator is identical to adding any new users, as discussed here, with the role should be set to Administrator.

Deleting a Local Administrator. #

Once a new administrator has been appointed, deleting the current administrator is identical to any other user, as discussed here. However the following must be noted:

When the u3a nominated local administrator stands down it is their and the committee’s responsibility to:

  • Notify the Third Age Trust of the change of the administrator, to ensure that all communications from the TAT are directed to the correct person.
  • Change the details on the local u3a site’s contact list.
  • Remove their details from related sites, for example, the Development Forum, as required.

Summary of User Roles and Access Right #

It is important to note that a User may be able to view a range of information held by the u3a, including contact details. Hence, prospective Administrators or Editors should be fully aware of the u3a’s data protection policy and GDPR.

WordPress has five default user roles:

  • Administrator: Create, edit, publish, and delete any content, manage plugins and themes, edit code and delete other user accounts.
  • Editor: Create, edit, delete, and publish pages and posts, including those belonging to other users.
  • Author: Create, edit, delete, and publish their posts (and upload media files), subject to allocation of permission by an Administrator.
  • Contributor: Able to read all posts, as well as deleting and editing their posts. They are not permitted to publish posts or upload media files.
  • Subscriber: They can only read posts and manage their profiles.

In SiteWorks the Contributor and Subscriber roles are not available, they can be set, but the users have no access to any feature other than their profiles. In addition, an Author’s access rights have been tailored to the specific requirements of the u3as.

In SiteWorks access to options and tools is tightly controlled, Table 1 shows the broad allocation of privileges between the three Roles. Editors and Authors only have access to content provision (posts etc), site configuration is undertaken solely by Administrators. Table 2 details the restrictions placed on users, particularly those identified as Authors.

It should be noted that an Author can only edit pages, posts etc, relating to content allocated to them by the Administrator. If a group is allocated to a specific Author, that user can only edit and publish material directly related to that Group (e.g. the Group Page(s), or Group Event(s)).

Overview of Dashboard Rights #

As discussed in the Dashboard user guide, access to configuration options and tools is dependent on the Role as shown below:

Dashboard OptionSummary of all Available OptionsRole
PostsCreate, edit, publish and delete postsA, E, AU
MediaAllows configuration of the site and several pluginsA, E, AU
PagesCreate, edit, publish and delete pagesA, E
u3a GroupsCreate, edit and delete groupsA, E, AU
u3a EventsCreate, edit, publish and delete eventsA, E, AU
u3a VenuesAdd, edit and delete venuesA, E
u3a ContactsAdd, edit and delete contactsA, E
u3a NoticesCreate, edit, publish and delete noticesA, E
u3a SettingsManaging the options relating to u3a groups, events and venues.A
AppearanceManaging the site appearance under the u3a themeA
PluginsManage pluginsA
UsersAdd, edit, and delete usersA
ToolsTools to manage site dataA
AnalyticsGenerates a wide range of statistics regarding site usage A
SettingsAllows configuration of the site and a number of pluginsA
Loginizer SecurityConfigure the security plugin.A
Table 1: Overview of access rights. Key: A: Administrator, E: Editor, AU: Author. It should be noted that the Author does not have access to all features.

In addition, all users have access to their Profile, to change passwords, and several other options, including contact information, first and last names,

Content Management Rights #

The following table summarises the ability of users to manage content on the website:

FeatureAdministratorEditorAuthor
PostsV, C, D, E, PV, C, D, E, PV, C, d, e, P
Post CategoriesV, C, D, E, PV, C, D, E, PV
MediaV, U, DV, U, dV, d, U
PagesV, C, D, E, PV, C, D, E, PV
u3a GroupsV, C, D, EV, C, D, EV, e, d, P
u3a EventsV, C, D, EV, C, D, EV, c, d, e, P
u3a VenuesV, C, D, EV, C, D, EV
u3a ContactsV, C, D, EV, C, D, EV‡
u3a NoticesV, C, D, E, PV, C, D, E, PV
Table 2: Detailed Summary of Roles and Access to Content Tools.
While WordPress has limited image processing capabilities, it is advised that all image processing is undertaken with a specialist package such as Adobe Photoshop or GIMP (GNU Image Manipulation Program). All other media need to be created and edited outside WordPress.
‡Authors can only view contacts as a pulldown menu when configuring events, this is to maintain adherence to GDPR requirements.
cCreate content of this type, subject to the allocation of the required permission(s) by the Administrator.
CUnrestricted creation of content of this type.
dDeletion of contents of this type, subject to the allocation of the required permission(s) by the Administrator, or ownership.
DUnrestricted deletion of content of this type.
eEdit content of this type, subject to the allocation of the required permission(s) by the Administrator, or ownership.
EUnrestricted editing of content of this type.
PAbility to publish content.
UUpload media of any type.
VView all website content of this type.
Table 3: Key for Table 2.

Assigning Pages or Groups to a Specific Author. #

An Author cannot create a new page or group; the Administrator may wish to allocate an existing or newly created page or group to a specific Author, for example to a group leader when a group is created. Once a group is assigned to an Author they can edit the Group Page, and create and publish posts and events related to the group.

Select PagesAll Pages or GroupsAll Groups from the Dashboard, then select Quick Edit when hovering over the name. Then select the Author to be assigned from the pull-down menu, and then Update. The example below is for a Group:

Updated on 09/12/2024