Access control
Access control lets you grant snippet permissions to specific WordPress roles, so SnipCraft is no longer limited to administrators: editors, authors, or any custom role can be given the right level of access.
Pro
The access control panel is a SnipCraft Pro feature. Without Pro, both capabilities remain locked to the administrator role.Role capability matrix
SnipCraft uses two WordPress capabilities to gate access. The snipcraft_manage capability covers all snippet management operations: creating, editing, deleting, enabling or disabling snippets, accessing settings, and using the cloud library. The snipcraft_edit_php capability is a stricter, separately granted right that allows writing and running PHP snippets.
The access control panel shows every registered WordPress role as a row, with a toggle for each capability per role. You can assign snipcraft_manage to any role: for example, giving editors the ability to manage CSS, JavaScript, and HTML snippets. The administrator role is always locked in for both capabilities and cannot be removed.
PHP stays gated
PHP editing is intentionally kept as a separate capability. Holding snipcraft_manage does not imply snipcraft_edit_php. You can grant broad snippet management access without enabling arbitrary PHP execution on the server. On a multisite network, PHP editing is further restricted to super admins only, regardless of the per-role matrix. The wp-config kill switch (SNIPCRAFT_DISABLE_PHP) disables PHP editing entirely for all roles when set. For a full explanation of the PHP security model, see PHP editing & security.
Related
For the PHP capability model and the wp-config kill switch, see PHP editing & security. For access control on a WordPress multisite network, see Multisite & network snippets.