Toolset Access
Antivirus scan
Powered by ClamAV
✅ Verified clean
This product file has passed our security filters.
Want to run a fresh ClamAV scan right now? Takes a few seconds and shows scanner version, signature DB and live result.
This can take 5 to 30 seconds.
Clean file Threat detected
No threats detected in this file.
- File
- Size
- Scanned
- ClamAV
- Signature database
⚡ Powered by ClamAV
Scan could not be completed
Report product
If you detected an issue (broken file, malware, inappropriate content, etc.) let us know and we'll review it ASAP.
Sign in to report
About Toolset Access
The extra permission you grant because a smaller one is missing
Someone joins the team who only has to update one content type. No WordPress role describes that job, so you assign Editor and get on with your day. From that moment, that person can also touch every page on the site.
When the available roles do not match your team, every permission comes out a little bigger than it needs to be. Toolset Access lets you define your own roles and choose what each one does in the admin, which screens it reaches and which content it can read, without writing code.
Roles built for your org chart
- Custom roles: you can create as many as you need, start from the Subscriber privileges and adjust each one.
- Equivalent level or manual capabilities: you match a role to a WordPress one or adjust it capability by capability.
- Admin screens: you choose which ones each new role reaches and which actions it performs.
- Compatible with other plugins: they are saved the same way as WordPress roles, so other plugins can see them.
- Several roles per user: Toolset checks the main role first and then the additional ones. One role having the permission is enough.
- Specific users: privileges go to a whole role or to specific people.
- WPML and WooCommerce: their capabilities appear integrated in the options.
Reading, editing and forms kept apart
With content groups you set read permissions for entire roles or for individual users. People without access can see the standard 404 page or another template. Control also reaches specific elements inside a page, which lets you reserve parts for members.
Custom fields have their own tab. Post field groups and user field groups handle different permissions, and granting view without modify leaves them read-only. For forms, the Toolset Forms tab defines which roles can use each post form.
Limits with fields, profiles and payments
- Individual fields: settings apply to the whole group. To treat one field separately, create another group.
- Other people's profiles: WordPress reserves access to other users' profiles for administrators, and Access does not open those fields to other roles.
- Payments: it helps build membership and paid-content sites, but its features do not include charging fees.
Your first page for logged-in users only
Control begins when you place a content type under Access. This is how to hide a page from visitors:
- In Toolset, Access Control, Post Types tab, open Pages and check Managed by Access.
- Make sure the Read boxes stay checked and save. Pages remain visible.
- In the Post Groups tab, create a group and add the pages you want to hide.
- In the Read column of the permissions table, uncheck Guest.
- With the pen icon, choose what visitors will see instead of those pages.
Afterwards, open one of those pages in a private window to see the result as a visitor.
Three plugins that fit alongside it
Toolset Types defines the content types, taxonomies and fields you later assign permissions on. If your need is limited to editing capabilities, User Role Editor Pro works role by role and adds blocking of admin menu items.
To close entire WordPress categories by password, role or user, Password Protected Categories is dedicated to that specific task.
Role cases worth clearing up
Will other plugins see my new roles?
Yes, because they are saved the same way as WordPress's own roles.
What if a user has two roles with different permissions?
If the main role lacks the permission, the additional ones are checked. If one has it, the check passes.
What does someone without read permission see?
The standard 404 page or another template you choose.
Can I give permissions to a single person?
Yes, privileges accept whole roles or specific users.
Can I protect a single field?
The setting works per field group, so that field must go in a group of its own.
Do I need to code?
No, permissions are set up from the Access Control screens.
Version history
-
v
2.9.7 Current 29 Oct 2026
-
v
2.9.5 8 Jul 2026
-
v
2.9.4.2 17 Jul 2025
Customer reviews
Sign in to leave a review. Only people who have the product can review it.
No reviews for this product yet.
Frequently asked questions
-
GPL (General Public License) is the license under which WordPress and most premium plugins/themes are distributed. It grants you the right to use, modify and redistribute the software in as many projects as you want, with no domain restrictions.
-
Yes. With membership you get automatic updates via our GPLClub Updater plugin (installed on your WP, detects new versions and applies them). With individual purchase, you get one year of manual updates from your account.
-
Depends on the plan. Monthly: 3 domains. Semi-annual: 7. Annual and Lifetime: 15. Individual purchase: 1 domain.
-
GPLClub offers its own support for installation, configuration and compatibility. For direct support from the original author (feature requests, product-specific bugs), a license purchased from the author is required.
