User Toolkit

Description

User Tools adds missing features to user management, such as basic user activities, including last login, registration dates and user switch from the User administration screen. You can deactivate users without deleting them, allowing you to maintain your ownership of past user activity and content.

SECURITY

Disabled user

Your own user or the first created used cannot be disabled. Disabled user will not lost data or be deleted under any circumstances.

User switching

Only users with the ability to edit other users can switch user accounts. Unless you create new roles with this capabilities, this is only Administrators on single site installations, and Super Admins on Multisite installations.
Passwords are not (and cannot be) revealed.
Uses the cookie authentication system in WordPress for user switching.
Implements the nonce security system in WordPress, meaning only those who intend to switch users can switch.
Full support for user session validation where appropriate.
Full support for administration over SSL (if applicable).

** REST API Support **

The field last_login is included as a result in endpoint wp/v2/users/.
Filtering the endpoint wp/v2/users/ using parameter last_login is also supported.

USAGE

Disable user

1. Visit the Users menu in WordPress and you will see a enable/disable switch in the list of each user.
2. Click on the “Activate” switch to disable (gray) or to enable (blue).
3. Visit every user profile and check/uncheck “Activate user login” to enable/disabled the user.

Switch user

1. Visit the Users menu in WordPress and you will see a “Switch to” link in the list of each user.
2. Visit every user profile and click on the “Switch to {user}” to switch to the user.
3. You will be able to switch back using the message that will appear in every admin screen.
4. You will be able to switch back using the “Switch back to {user}” located in the User menu in the admin bar.
5. If the user you switched to does not have access to the admin screens you will be able to switch back using the link located in the right bottom corner of the screen.

User Columns

1. Visit the Users menu in WordPress and you will see a “Last Login”, “Registered” and “ID” columns by default in the list of each user.
2. Disable all or any column clicking “Screen Options” on the right top corner of the screen.

** Retrieve Last Login info using REST API **

1. Get last_login field with ISO 8601 form on endpoint wp/v2/users/
2. Filter using parameter last_login using the following options wp/v2/users/?last_login=FROM,[TO:optional] using ISO 8601 or Y-m-d format.

PRIVACY STATEMENT

This plugin makes use of browser cookies in order to allow users to switch to another account. Its cookies operate using the same mechanism as the authentication cookies in WordPress core, which means their values contain the user’s user_login field in plain text which should be treated as potentially personally identifiable information (PII) for privacy and regulatory reasons (GDPR, CCPA, etc). . The names of the cookies are:

• wp_usrtk_user_from_{COOKIEHASH}
• wp_usrtk_user_switched_{COOKIEHASH}