A Guide to Roles, Capabilities and Permissions

SureFeedback has various permissions built in that allow users to perform specific functions based on their role. Many of the advanced functions can only be performed by those with an administrator role.  

To view the role of a specific user navigate to Users > All Users from the WordPress options panel. A role can be changed by selecting the user and clicking Edit. 

Permissions Cheatsheet

Permissions and Rolls	Admin	Project Admin	Project Editor	Project Collaborator	Project Client
Edit Mockups / Websites	Yes	Yes	Yes	Yes	No
View Mockups / Websites	Yes	Yes	Yes	Yes	Yes
View Mockups or Websites they are not members of	Yes	Yes	Yes	No	No
Comment on Mockups / Websites	Yes	Yes	Yes	Yes	Yes
Create new Mockups / Websites	Yes	Yes	Yes	No	No
Approve Mockups / Websites	Yes	Yes	Yes	Yes	Yes
Delete Mockups / Websites	Yes	Yes	Yes	Yes	No
Delete / Edit Others’ Comments	Yes	Yes	Yes	Yes	No
View SureFeedback Settings	Yes	Yes	No	No	No
View all WordPress pages and settings	Yes	No	No	No	No

What an Administrator Can Do

Administrator roles can perform the most functions within SureFeedback. 

• Can read, edit mockups and websites
• Can leave comments on mockups and websites.
• Can create new mockups and websites
• Can delete websites and mockups
• Can edit and delete others comments
• Can approve mockups and resolve website threads
• Can edit SureFeedback settings
• Can view all WordPress pages and settings.
• Can view Mockups or Websites they aren’t members of.

What a Project Administrator Can Do

• Can read, edit mockups and websites
• Can leave comments on mockups and websites.
• Can create new mockups and websites
• Can delete websites and mockups
• Can edit and delete others comments
• Can approve mockups and resolve website threads
• Can edit SureFeedback settings
• Can NOT view any other WordPress dashboard pages or settings other than their profile.
• Can view Mockups or Websites they aren’t members of.

What a Project Editor Can Do

• Can read, edit mockups and websites
• Can leave comments on mockups and websites.
• Can create new mockups and websites
• Can delete websites and mockups
• Can edit and delete others comments
• Can approve mockups and resolve website threads
• Can NOT edit SureFeedback settings
• Can NOT view any other WordPress dashboard pages or settings other than their profile.
• Can view Mockups or Websites they aren’t members of.

What a Project Collaborator Can Do

• Can read, edit mockups and websites
• Can leave comments on mockups and websites they are members of.
• Can NOT create new mockups and websites
• Can delete websites and mockups
• Can edit and delete others comments
• Can approve mockups and resolve website threads
• Can NOT edit SureFeedback settings
• Can NOT view any other WordPress dashboard pages or settings other than their profile.
• Can NOT view Mockups or Websites they aren’t members of.

What an Project Client Can Do

• Can view mockups and websites
• Can leave comments on mockups and websites they are members of.
• Can NOT edit mockups and website
• Can NOT create new mockups and websites
• Can NOT delete websites and mockups
• Can NOT edit and delete others comments
• Can approve mockups and resolve website threads
• Can NOT edit SureFeedback settings
• Can NOT view any WordPress dashboard pages or settings other than their profile.
• Can NOT view Mockups or Websites they aren’t members of.

What a -no role for this site- Can Do

• Can view mockups (if project permissions are set this way)
• Can leave comments on mockups if mockup project permissions allow it.
• Can NOT view websites (due to security concerns).
• Can NOT edit mockups and website
• Can NOT create new mockups and websites
• Can NOT delete websites and mockups
• Can NOT edit and delete others comments
• Can approve mockups and resolve website threads (if project permissions are set this way)
• Can NOT edit SureFeedback settings
• Can NOT access the WordPress dashboard.

What can non-users or guests do

For mockups, a guest or non-user’s permissions will vary depending on the project privacy settings, determined on each individual project in the Options section.

For websites, a guest cannot perform any actions like viewing or editing website comments due to cross origin security concerns. 

Changing Permissions

The “Magic of WordPress” is you can customize almost anything! If you want to change a role’s capabilities (i.e. remove or add specific capabilities) from a specific role, we suggest using a free plugin called “User Role Editor”:

https://wordpress.org/plugins/user-role-editor/