-
Echo Knowledge Base
-
Add-ons
-
Access Manager
Access Manager Limitations
0 out Of 5 Stars
| 5 Stars | 0% | |
| 4 Stars | 0% | |
| 3 Stars | 0% | |
| 2 Stars | 0% | |
| 1 Stars | 0% |
WordPress does not have a solid foundation for access control
WordPress security is about risk reduction, not risk elimination. Because there will always be risk, security will remain a continuous process, requiring frequent assessment of attack vectors. WordPress has no plugin that solves all its security limitations and we feel our solution is one of the most comprehensive of all available plugins.
- Inability to block access if your website has a plugin that directly accesses WordPress database tables instead of using default WordPress functions and hooks.
- Inability to block access to plugins that expose KB content when not using WordPress function at all or in an intended way.
- KB Content is not protected if it is exported from WordPress by plugins or other means. Tags are not protected at this time.
- Access Manager does not have WPML support or any other language plugins. One available option is to use a separate Knowledge Base for each language.
- Download links to PDFs, documents, links to non-KB posts and media are not protected. Access Manager restricts access to linked articles as long as the linked resource is a KB article. It will not restrict access to posts, attachments and external URLs.
- In a multi-site structure the Access Manager has to run within the individual site. Super admin is not fully supported in terms of features. Use site admin instead.
Website visual builders are tools that allow editors and administrators to edit their site content directly on the front end outside of the default WordPress editor. There are two types of such builders:
- Plugins such as Beaver Builder, Divi, and Visual Composer
- A new core WordPress project called Gutenberg that aims to replace the current WordPress editor
Website builder plugins typically save KB article data outside of the regular post database tables. Therefore some builder plugins could expose article data if working outside of WordPress hooks and functions. We have not detected any compromises but cannot guarantee the security when using builders as they manipulate the data outside of our control. If this is a concern then use the default WP editor for your KB articles. Once Gutenberg builder project is released we will verify and update Access Manager accordingly to be compatible with this upcoming core feature.
Due to inherent security limits in WordPress, and other factors listed in section 4.0, we recommend using Access Manager only for content that does not contain personal information or critical confidential information. Therefore Access Manager is best suited to:
- Restrict access to Premium website content.
- Restrict access to non-critical internal information.
- Separate content between groups in your organization.
- Prevent employees from modifying non-critical content.
Access Manager should not be used to protect personal, confidential, and sensitive information. For all details read the full disclaimer here.
0 out Of 5 Stars
| 5 Stars | 0% | |
| 4 Stars | 0% | |
| 3 Stars | 0% | |
| 2 Stars | 0% | |
| 1 Stars | 0% |
