WordPress gives you five roles (Administrator, Editor, Author, Contributor, Subscriber) and calls it a day. Need to let an author edit only their own posts? Need a Reviewer role with comment-moderation but not publishing rights? Need a Shop Manager who can edit products but not pages? You install User Role Editor or Members, learn their UI, and pray the next WP update doesn't break anything.
Contensio ships with a granular, resource-scoped permission system in the core. You get a full catalog of permissions, pre-built roles, and the ability to clone and customize to your heart's content.
The permission catalog
Content
content.viewcontent.createcontent.updatecontent.deletecontent.publish
Media
media.viewmedia.uploadmedia.delete
Users
users.viewusers.createusers.updateusers.delete
Roles
roles.manage
Plugins
plugins.manageplugins.configure
SEO
seo.edit_contentseo.manage_redirectsseo.manage_settings
Settings
settings.generalsettings.emailsettings.languages
Audit
activity_log.view
Tools
tools.import_export
Built-in roles (and cloning)
Contensio seeds three roles on install: Admin, Editor, Author. You can clone any role, rename it, toggle specific permissions on or off, and assign it to users. The seeded roles are marked as system — you can't delete them, but you can override their permissions or hide them from assignment.
Plugins can declare their own permissions
When you enable a plugin that defines permissions (e.g. a Commerce plugin with
orders.view, orders.refund), those permissions appear in the admin
alongside core ones. Disable the plugin and its permissions vanish cleanly.
Compared to WordPress
WordPress
- ✗Five baked-in roles, cap-bitmap model
- ✗Role-editor plugin needed for custom roles
- ✗Plugin-added capabilities often linger after uninstall
Contensio
- ✓Granular permissions, per-resource
- ✓Clone + customize any role from admin
- ✓Plugin permissions auto-register / auto-unregister