Download to read offline
UX in the WordPress backend
- 1. User-Experience in theWordPress-Backend Stefan Kremer • June, 17th 2021 Foto von Tim Gouw von Pexels
- 2. Overview • out ofthe box • least privilege • menu items • notifications • final checks
- 3. out of thebox
- 4. • User roles •super-admin • administrator • editor • author • contributor • subscriber (https://wordpress.org/support/article/roles-and-capabilities/)
- 5.
- 6. ➡ only accesswhat you need ➡ a hacked account with less privileges can cause less damage
- 7. • have twoaccounts • (enhancend) editor for daily work on content • administrator only for maintenance tasks • different color schemes for different roles
- 8. enhance roles • UserRole Editor • edit capabilities of existing roles • create new roles with specific capabilities • Recommendations: • copy roles and their capabilities, rename them and edit to your needs • define capabilities as much as possible on role level, not on user level
- 9.
- 10. backend menu • Excuseme, is this all still logical? • Posts, Pages, CPTs – but all in one db-table? • Plugins that create their own top level menu entry • Plugins that create their own admin bar entry • the menu only has two levels, fly-out style • inconsistent with Customizer
- 11. 2560 x 1080px are just not sufficient
- 12. rearrange menus • AdminMenu Editor (Pro) • rearrange menus and admin bar • hide certain main menu entries, whole submenus • hide installed plugins from list • hide meta boxes in posts, pages, CPTs • modify dashboard widgets • customize branding, login screen and backend appearance
- 13. backend graphics • differentcolor scheme • complete different UI • animated gifs
- 14.
- 15. • flock ontop of the dashboard • rule of thumb: traffic light system • "do not hijack the backend" • just in the backend • some events create emails admin alerts
- 17. wishful thinking • centralevent handler • what ever happens will be logged here • complete history of events • log levels • info, warning, error, debug, … • list of notification channels • admin alert in the backend • sms and/or email notification • connector for syslog, greylog, ELK-stack, Slack …
- 18. • Simple History •several event loggers • comprehensive overview in dashboard • more detailed as separate menu item in dashboard • RSS Feed with random link (security by obscurity) • Stream • third-party integrations • AP Stream to …
- 19. • Unagi • severalevent loggers • comprehensive overview in dashboard • more detailed as separate menu item in dashboard • RSS Feed with random link (security by obscurity) • Notification (Pro) • custom emails • webhooks • Slack
- 20.
- 21. • User Switching •I see what you see • how does it look and feel • is everything still functional for the user with less priviledges • no need to create fake users • respect privacy of users!
- 22.