WP_Roles::remove_cap( string $role, string $cap )

Removes a capability from role.


Role name.
Capability name.

More Information

Changing the capabilities of a role is persistent, meaning the removed capability will stay in effect until explicitly granted.

This setting is saved to the database (in table wp_options, field 'wp_user_roles'), so you should run this only once, on theme/plugin activation and/or deactivation.


public function remove_cap( $role, $cap ) {
	if ( ! isset( $this->roles[ $role ] ) ) {

	unset( $this->roles[ $role ]['capabilities'][ $cap ] );
	if ( $this->use_db ) {
		update_option( $this->role_key, $this->roles );



User Contributed Notes

  1. Skip to note 2 content

    From Codex

     * Don't let editors read private posts.
     * An alternative using WP_Roles instead of WP_Role.
     * You should call the function when your plugin is activated.
     * @uses $wp_roles
     * @uses WP_Roles::remove_cap()
    function remove_editor_read_private_posts(){
    	// $wp_roles is an instance of WP_Roles.
    	global $wp_roles;
    	$wp_roles->remove_cap( 'editor', 'read_private_posts' );

You must log in before being able to contribute a note or feedback.