Deactivate Plugin

  • Im not sure if im missing something here, but from my experience most developers want an administrator access. The only way to achieve this is to clone the administrator access as a support access and then disable certain plugins and privileges i.e. work backwards. Otherwise using any other role simply doesn’t give sufficient privileges for the developer.

    So on AAM in the plugins section there is an option to diable the “Activate Plugin” but theres no option for “Deactivate Plugin” so basically they can just deactivate the AAM plugin and then it becomes useless. I have searched everywhere for a deactivate plugin (which seems like common sense if theres activate) but cant find anywhere.

    Now all I could find when I searched for “deactivate plugin” was this post (https://www.ads-software.com/support/topic/high-security-risk-disable-aam-access-for-others/) which recommended this link (https://aamplugin.com/help/how-to-manage-access-to-aam-page-for-other-users) But that is useless and actually broke me out completely so now I cant even access AAM for anybody. So now I have Deactivated the Plugin myself and deleted it.

    Im going to have to reinstall it again and try to work out how to prevent somebody from simply “Deactivating Plugins” because that’s a really bad security flaw. And I just cant believe how it has not been addressed after all this time.

    • This topic was modified 4 years, 6 months ago by matrix99.
Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter matrix99

    (@matrix99)

    Just an update, so after following the link which made me deactivate and delete the plugin. I have downloaded and activated again. But still I have no access. So basically now this plugin is completely useless. I need to know how to revent this “aam_manager” capability thing so I can access the plugin. And then how I can prevent users from deactivating the plugin.

    Hello,
    I’m not sure to understand everything but I can try to help you.

    First, to get back the access, you can use the plugin “User Role Editor” to give back the “aam_manager” capability to your role.

    Second, I’m not sure to understand, but I think you don’t want the other roles to deactivate this plugin and you want them, to keep the access to the plugins. I never tried so maybe it will not work, but you can try to put the AAM plugin folder, in the Mu plugins. /wp-content/mu-plugins
    I think they can’t deactivate it, nor delete it inside the mu-plugins (oh btw, you can’t do it in the admin panel, you need access to the wordpress files). If you don’t find any folder name “mu-plugins” in the wp-content, you just have to create it. The downside is that plugins placed in the / mu-plugins / directory will not appear in update notifications.

    Hope I could help you.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Deactivate Plugin’ is closed to new replies.