Content management systems, or CMS, get much attention in Web computing these days for the way they let multiple users work together or separately to create, edit, publish, and manage Web content without having to fiddle with computer code. WordPress lets you manage authors, members, and content, and you can do even more if you are willing to touch code.
Understanding User Capabilities
As the blog owner, you can decide who gets to write, edit, and publish content to your site. A critical aspect of using WordPress to manage content generated by multiple users is the permissions that you can assign to each user.
User Roles and Capabilities
WordPress provides a standard set of user roles, which specify what capabilities, or tasks, a user can perform. The standard roles are Administrator, Author, Editor, Contributor, and Subscriber. The subscriber role does not exist at WordPress.com.
If you set up the blog, you have Administrator capabilities. An Administrator can do anything, from writing posts to changing themes and adding users. In most cases, the blog owner runs the site as the Administrator, but more than one person can have the Administrator role. If you add an Administrator, make sure it is someone you absolutely trust!
As implied by the role’s title, the Editor role can write, edit, publish, and delete posts and pages by herself or by others. The Editor role also can moderate comments and manage categories, tags, and blogroll. An Editor can do a lot but cannot change themes, plugins, users, and the like.
Author and Contributor Capabilities
Authors can write, edit, publish, and delete posts that they wrote, but they cannot alter anyone else’s posts. They also can upload images for their posts. Contributors can write and edit posts, but an Editor or Administrator must review and publish them. Authors
and Contributors cannot create pages.
If you have open registration available, Subscriber is the default role. Some blogs require registration to comment on blog posts, and when a reader registers, he or she gets the Subscriber role. A Subscriber can read blog posts, comment, and have a subscriber
profile that defines his or her name, password, and so on. A WordPress.com registration fulfills that role for WordPress.com blogs.
If you own a blog and want to have several contributors, a good practice is to give any new users the fewest capabilities that they need to complete their jobs. Limiting broader capabilities to only the very few who need them deters both miscues and malicious changes.