therickjames

Got it! Thank you.

Thanks James!

Ok thanks. So to clarify, when documentation refers to “hidden files,” what this means is they are hidden to others by default, but not the admin, is this correct?

How many plugins is too many plugins? I know it’s not really about the number of plugins, but rather the functionality of them; but is there a ball park number you like to stay under? I have Astra Theme, and it seems Astra has enough add-ons alone to make it a long plugin list. Any thoughts?

Thank you for your reply. I should have specified. I already have too many plugins. I need to do this manually.

Please allow me to rephrase:
1. Pretend I want to be a Subscriber. I go to my site. I register. Now I’m on the front end of my site as a subscriber. But there is an admin bar there at the top. Now I can click on it and enter the site backend. The question is Why? Why the admin bar for Subscribers??? Why are you now in the backend of my site? Even if your capabilities are limited as a Subscriber? What reason do you have to need entry to the backend as a Subscriber? No one has ever explained this in any documentation.

2. Possible solutions
a) hide the admin bar on front-end, but now what does an Editor or Author role do if they need it?? And is this the only way a Subscriber is granted access to the backend? Or is there some other way I have yet to realize??

b) Limit access to the dashboard to certain IPs, but doesn’t this now prevent Subscribers from registering?? Or have I misunderstood something?? How could I possibly know the IPs of all potential future subscribers??

c) Redirect Subscribers who try to access the dashboard – but if this is the case, where does it say this? I’ve been searching for days and haven’t found documentation.

d) password protect the wp-admin – but this then renders an eCommerce site not usable to customers now, correct??

All of this is very ambiguous. And it all seems like it could be easily prevented by WordPress only allowing the upper user-roles access to the dashboard. Why would a Subscriber need access the the dashboard? And why would they need the admin bar? Why should an admin spend all this time trying to prevent users accessing their backend. Seems masochistic.

PS – I need to do it manually. I can’t add another plugin.

Thank you for your reply. I already read this.

I will rephrase:
1. Pretend you want to be a Subscriber. You go to my site. You register. Now you’re on the front end of my site as a subscriber. But there is an admin bar there at the top. Now you can click on it and enter the site backend. The question is Why? Why the admin bar for Subscribers??? Why are you now in the backend of my site? Even if your capabilities are limited as a Subscriber? What reason do you have to need entry to the backend as a Subscriber? No one has ever explained this in any documentation.

2. Possible solutions
a) hide the admin bar on front-end, but now what does an Editor or Author role do if they need it?? And is this the only way a Subscriber is granted access to the backend? Or is there some other way I have yet to realize??

b) Limit access to the dashboard to certain IPs, but doesn’t this now prevent Subscribers from registering?? Or have I misunderstood something?? I couldn’t possibly know the IPs of all potential future subscribers, right?

c) Redirect Subscribers who try to access the dashboard – but if this is the case, where does it say this? I’ve been searching for days and haven’t found documentation.

d) password protect the wp-admin – but this then renders an eCommerce site not usable to customers now, correct??

All of this is very ambiguous. And it all seems like it could be easily prevented by WordPress only allowing the upper user-roles access to the dashboard. Why would a Subscriber need access the the dashboard? And why would they need the admin bar? Why should an admin spend all this time trying to prevent users accessing their backend. Seems masochistic.

PS – I need to do it manually. I can’t add another plugin.

Thank you for your reply. I already read this. Though, I’m not sure how this pertains to my question?

I will rephrase:
1. Pretend I want to be a Subscriber. I go to my site. I register. Now I’m on the front end of my site as a subscriber. But there is an admin bar there at the top. Now I can click on it and enter the site backend. The question is Why? Why the admin bar for Subscribers??? Why are you now in the backend of my site? Even if your capabilities are limited as a Subscriber? What reason do you have to need entry to the backend as a Subscriber? No one has ever explained this in any documentation.

2. Possible solutions
a) hide the admin bar on front-end, but now what does an Editor or Author role do if they need it?? And is this the only way a Subscriber is granted access to the backend? Or is there some other way I have yet to realize??

b) Limit access to the dashboard to certain IPs, but doesn’t this now prevent Subscribers from registering?? Or have I misunderstood something?? How could I possibly know the IPs of all potential future subscribers??

c) Redirect Subscribers who try to access the dashboard – but if this is the case, where does it say this? I’ve been searching for days and haven’t found documentation.

d) password protect the wp-admin – but this then renders an eCommerce site not usable to customers now, correct??

All of this is very ambiguous. And it all seems like it could be easily prevented by WordPress only allowing the upper user-roles access to the dashboard. Why would a Subscriber need access the the dashboard? And why would they need the admin bar? Why should an admin spend all this time trying to prevent users accessing their backend. Seems masochistic.

PS – I need to do it manually. I can’t add another plugin.