Restrict theme management
Use five independent controls to limit theme installation, switching, deletion, visual customization or source-file editing. These restrictions apply to administrators as well as other users; on multisite they also apply to super administrators throughout the network.
Where to configure them
- Multisite: open Network Admin → Settings → POM Tweaks → Themes → Theme controls as a network administrator. These controls appear only here and apply to every site in this network.
- Single site: open Settings → POM Tweaks → Themes → Theme controls as an administrator.
You must retain an account that can manage POM Tweaks in the appropriate administration area. These controls do not remove that permission.
Choose a restriction
| Control | Effect | Separate behavior |
|---|---|---|
| Disable theme installation | Blocks installation from the theme directory and ZIP uploads, including the native WordPress theme installer. | Updates to installed themes remain governed by Updates → Update controls. |
| Disable theme switching | Removes permission to activate another theme. | The current theme stays active. The Themes screen remains available when the user can customize themes. Network theme availability is a separate setting. |
| Disable theme deletion | Blocks native theme deletion, including bulk and AJAX actions. | Installed theme files remain intact; updating themes is a separate operation. |
| Disable theme customization | Blocks the Customizer, Site Editor and WordPress appearance controls such as menus, widgets, templates, styles and Additional CSS. | Ordinary post editing remains available. Settings provided by themes or plugins with separate permissions remain independent. |
| Disable the theme file editor | Blocks the native Theme File Editor and its file-saving requests. | The Plugin File Editor and visual customization have separate permissions. |
- Enable only the restriction you need.
- Click Save.
- Open the affected screen in a fresh request and verify the result before enabling another restriction.
The controls change WordPress permission checks without rewriting user roles. Restricted actions disappear where WordPress uses those permissions. Direct requests that check the same permissions are denied by WordPress. If both switching and customization are blocked, WordPress may deny access to the site's Themes screen altogether; Network Admin can still inspect the network theme inventory.
Verify and recover
- Check the relevant theme screen with an administrator account and, where applicable, a site administrator in the network.
- Confirm the expected action or menu is absent. Direct access to installation, customization or file editing should also be denied when the corresponding restriction is enabled.
- Confirm normal content editing, the active theme and unrelated plugin management still work.
- To restore access, return to Theme controls, disable the relevant restriction and click Save. Other WordPress, hosting or plugin restrictions still apply.
These controls govern WordPress management permissions. They do not prevent direct filesystem or database changes, hosting deployments, or custom code that bypasses those permissions. Theme installation is additionally blocked at the native upgrader's installation stage; theme updates and translation updates are separate operations. They do not switch, install or delete a theme merely by being enabled.
If a user cannot see the controls on multisite, use Network Admin instead of an individual site's settings. If access remains blocked after disabling a control, review the user's normal permissions and any other active restriction. Do not enable several restrictions at once while diagnosing access.
See also Control WordPress updates, Restrict risky editor and theme operations and Tour the interface.