Restrict Plugin Access Bedrock

Here's a step-by-step guide to restrict access to the Plugins page:

1. **Create a Custom Plugin**:
You can create a simple plugin to handle the access restrictions.

– In your `wp-content/plugins/` directory, create a new folder (e.g., `restrict-plugins`).
– Inside that folder, create a PHP file (e.g., `restrict-plugins.php`).

2. **Add Role Restriction Code**:

Here's an example of how you can restrict access to the "Plugins" menu for users who do not have a specific role (for example, only allowing Administrators to access it):

<?php
   /*
   Plugin Name: Restrict Plugin Access
   Description: Restricts access to the Plugins page based on user role.
   Version: 1.0
   Author: Your Name
   */

   // Hook into the admin_menu action to remove the Plugins menu
   add_action('admin_menu', 'restrict_plugins_menu_access');

   function restrict_plugins_menu_access() {
       // Check if the current user has the required role (e.g., Administrator)
       if (!current_user_can('administrator')) {
           // Remove the Plugins menu item
           remove_menu_page('plugins.php');
       }
   }

   // Hook into the admin_init action to prevent non-admins from accessing plugin-related pages directly
   add_action('admin_init', 'restrict_plugins_page_access');

   function restrict_plugins_page_access() {
       // Check if the current user is trying to access a plugin page
       if (!current_user_can('administrator') && isset($_GET['page']) && strpos($_GET['page'], 'plugin') !== false) {
           wp_redirect(admin_url());
           exit;
       }
   }

3. **Activate the Plugin**:
– After creating the plugin file, go to the WordPress dashboard.
– Navigate to **Plugins > Installed Plugins**, and activate the "Restrict Plugin Access" plugin.

4. **Test**:
– Try logging in as a non-administrator user. They should no longer have access to the "Plugins" menu in the admin area.
– Admin users will still be able to access the Plugins page as usual.

This method ensures that only users with specific roles (like `administrator`) can access the Plugins page in the WordPress admin dashboard. You can modify the `current_user_can('administrator')` condition to check for other roles if needed.

Here’s how you can assign the **administrator** role to the currently logged-in user:

### 1. **Use `wp_get_current_user()` and `add_role()`**

You can use the `wp_get_current_user()` function to get the current user and then assign them the administrator role using `add_role()`.

You could add this code to your theme’s `functions.php` file, or better, in a custom plugin if you want it to be isolated from your theme.

function assign_admin_role_to_current_user() {
    $user = wp_get_current_user();
    
    // Check if the user is not already an administrator
    if (!in_array('administrator', $user->roles)) {
        // Add the 'administrator' role to the current user
        $user->add_role('administrator');
    }
}

// Hook into WordPress initialization to run the code when needed
add_action('init', 'assign_admin_role_to_current_user');

### 2. **Explanation**:
– `wp_get_current_user()` retrieves the current logged-in user.
– `$user->add_role('administrator')` adds the `administrator` role to the user if they do not already have it.
– The `add_action('init', 'assign_admin_role_to_current_user');` ensures that this code runs as part of WordPress’s initialization process.

### 3. **Test the Functionality**:
Once you add this code, it will assign the administrator role to the current user automatically. Make sure you test it by logging in as a user who isn’t an admin, and once this code runs, they will gain the admin role.

### 4. **Remove the Code After Use**:
After assigning the role, it’s a good idea to remove this code or wrap it in a condition to prevent it from being run repeatedly, as you don't want to keep re-assigning the admin role unnecessarily.

For instance, you could change the code to only assign the role once:

function assign_admin_role_to_current_user() {
    $user = wp_get_current_user();

    // Assign only if the user doesn't have the 'administrator' role yet
    if (!in_array('administrator', $user->roles)) {
        $user->add_role('administrator');
    }
}

add_action('init', 'assign_admin_role_to_current_user');

Alternatively, after assigning the role once, you can remove the action hook:

function assign_admin_role_to_current_user() {
    $user = wp_get_current_user();

    // Assign if not already an administrator
    if (!in_array('administrator', $user->roles)) {
        $user->add_role('administrator');
        remove_action('init', 'assign_admin_role_to_current_user'); // Remove the function after it runs
    }
}

add_action('init', 'assign_admin_role_to_current_user');

This way, the code runs only once per user session and does not keep adding the role.