WP_Roles::remove_cap( string $role, string $cap )

Removes a capability from role.

Parameters

$rolestringrequired
Role name.
$capstringrequired
Capability name.

More Information

Changing the capabilities of a role is persistent, meaning the removed capability will stay in effect until explicitly granted.

This setting is saved to the database (in table wp_options, field 'wp_user_roles'), so you should run this only once, on theme/plugin activation and/or deactivation.

Source

public function remove_cap( $role, $cap ) {
	if ( ! isset( $this->roles[ $role ] ) ) {
		return;
	}

	unset( $this->roles[ $role ]['capabilities'][ $cap ] );
	if ( $this->use_db ) {
		update_option( $this->role_key, $this->roles );
	}
}

Changelog

VersionDescription
2.0.0Introduced.

User Contributed Notes

  1. Skip to note 2 content

    From Codex

    /**
     * Don't let editors read private posts.
     *
     * An alternative using WP_Roles instead of WP_Role.
     *
     * You should call the function when your plugin is activated.
     *
     * @uses $wp_roles
     * @uses WP_Roles::remove_cap()
     */
    function remove_editor_read_private_posts(){
    
    	// $wp_roles is an instance of WP_Roles.
    	global $wp_roles;
    	$wp_roles->remove_cap( 'editor', 'read_private_posts' );
    }

You must log in before being able to contribute a note or feedback.