Restrict risky editor and theme operations

Use this workflow to restrict theme operations across a site or multisite network, and import or export tools across a site. These controls alter permission checks; visual cleanup controls do not.

Map the required capabilities

Before applying a policy, list whether users must:

  • switch the active theme;
  • install or delete themes;
  • use the Theme File Editor;
  • manage widgets, menus, headers, backgrounds, or the Customizer;
  • import or export WordPress content.

Keep an administrator account that can restore the settings. Theme restrictions apply to all users in the site or network, including super administrators. Import and export restrictions apply to all users of the selected site. These controls do not remove permission to manage POM Tweaks.

Apply the narrowest restriction

  1. On multisite, open Network Admin → Settings → POM Tweaks → Themes → Theme controls. On standalone WordPress, open Settings → POM Tweaks → Themes → Theme controls.
  2. Enable Disable theme switching to prevent activation of another theme. Theme inspection remains available when the user can customize themes.
  3. Use Disable theme installation and Disable theme deletion independently when installation or deletion must be blocked.
  4. Use Disable the theme file editor to block the native source-file editor without disabling the Plugin File Editor or visual customization.
  5. Use Disable theme customization only after reviewing its broad effect on WordPress menus, widgets, the Customizer, Site Editor, templates, styles and Additional CSS.
  6. Under the site's Settings → POM Tweaks → White labelling → Admin general settings, select Disable import or Disable export only when that tool should be unavailable to every user of that site.
  7. Save after each restriction and verify its effect before applying the next.

Do not substitute presentation controls

Removing Screen Options, hiding a menu, hiding a plugin row, or removing an editing action does not establish an authorization boundary. A direct URL or another integration can remain available when the capability is unchanged.

Verify access and recovery

  1. Sign in as an administrator, and as a site administrator on multisite.
  2. Check the Themes screen, Customizer, Theme File Editor, Widgets, Menus, Import, and Export according to the policy.
  3. Attempt the relevant direct administration URL as well as the visible menu.
  4. Confirm ordinary content editing still works.
  5. Sign in as the recovery administrator and verify you can still manage the settings. These theme and import/export restrictions also apply to this account.
  6. Disable one restriction, save, and confirm only its associated access returns.
Choose a feed policy
Previous
Build a consistent branded administration experience
Next