Brukerbytting

Beskrivelse

Denne utvidelsen lar deg raskt bytte mellom brukerkonti i WordPress ved å klikke på en lenke. Du vil straks bli logget ut og inn som den valgte brukeren. Dette er praktisk i miljøer for testing der du regelmessig logger inn og ut av ulike brukerkonti, eller for administratorer som trenger å bytte mellom mange brukerkonti.

Funksjoner

  • Bytt bruker: Bytt umiddelbart til en hvilken som helst brukerkonto fra siden Brukere.
  • Bytt tilbake: Bytt umiddelbart tilbake til din originale brukerkonto.
  • Bytt til utlogget: Logg ut av din brukerkonto, men behold muligheten til å bytte tilbake inn igjen.
  • Switching between users is secure (see the Sikkerhet section below).
  • Compatible with WordPress, WordPress Multisite, WooCommerce, BuddyPress, bbPress, and most two-factor authentication plugins.

Sikkerhet

  • Bare brukere med tillatelse til å redigere andre brukere kan bytte brukerkonto. Som standard er dette Administrator på enkeltinstallasjoner og nettverksadministratorer på nettverk (Super Admin-er på Multisite).
  • Passord blir ikke (og kan ikke) avsløres.
  • Uses the cookie authentication system in WordPress when remembering the account(s) you’ve switched from and when switching back.
  • Implements the nonce security system in WordPress, meaning only those who intend to switch users can switch.
  • Full support for user session validation where appropriate.
  • Full support for administration over SSL (if applicable).

Bruk

  1. Besøk Brukere i WordPress og du vil se en Bytt til-lenke i listen over handlinger for hver bruker.
  2. Klikke på dette og du vil straks bytte til den brukerkontoen.
  3. Du kan bytte tilbake til din originale brukerkonto gjennom lenken Bytt tilbake… under «Hei…» og din profil på oppgavelinjen i WordPress.

Se FAQ for informasjon om Bytt til utlogget-funksjonen.

Personvernerklæring

User Switching makes use of browser cookies in order to allow users to switch to another account. Its cookies operate using the same mechanism as the authentication cookies in WordPress core, therefore their values contain the user’s user_login field in plain text which should be treated as potentially personally identifiable information. The names of the cookies are:

  • wordpress_user_sw_{COOKIEHASH}
  • wordpress_user_sw_secure_{COOKIEHASH}
  • wordpress_user_sw_olduser_{COOKIEHASH}

User Switching does not send data to any third party, nor does it include any third party resources, nor will it ever do so.

See also the FAQ for some questions relating to privacy and safety when switching between users.

Ethical Open Source

User Switching is considered Ethical Open Source because it meets all of the criteria of The Ethical Source Definition (ESD):

  1. It benefits the commons.
  2. It is created in the open.
  3. Its community is welcoming and just.
  4. It puts accessibility first.
  5. It prioritizes user safety.
  6. It protects user privacy.
  7. It encourages fair compensation.

Skjermskudd

  • The Switch To link on the Users screen

  • The Switch To link on a user's profile

FAQ

Hva betyr «Bytt til utlogget?»

Bytte til utlogget logger deg ut av din brukerkonto, men beholder din bruker-ID i en egen informasjonskapsel slik at du straks kan bytte tilbake til innlogget uten å logge inn igjen manuelt. Det er beslektet med å bytte til ingen bruker og kunne bytte tilbake.

Lenke Bytt til utlogget finnes under profil-menyen på verktøylinjen i WordPress. Straks du har byttet til utlogget vil du se en Bytt tilbake-lenke på innloggingssiden og i sidebunnen på nettsiden.

Virker denne utvidelsen med Multisite?

Ja, du kan også bytte bruker fra oversikten Brukere i Nettverksadmin.

Virker denne utvidelsen med BuddyPress?

Ja, og du kan også bytte bruker fra både medlemsprofiler og medlemsoversikten.

Virker denne utvidelsen med bbPress?

Ja, og du kan også bytte bruker fra medlemsprofil-sider.

Does this plugin work with WooCommerce?

Yes, but for maximum compatibility you should use WooCommerce version 3.6 or later.

Virker denne utvidelsen hvis mitt nettsted bruker en utvidelse for to-faktor autensering?

Ja, i de fleste tilfeller.

One exception I’m aware of is Duo Security. If you’re using this plugin, you should install the User Switching for Duo Security add-on plugin which will prevent the two-factor authentication prompt from appearing when you switch between users.

Hvilke tillatelser trenger en bruker for å kunne bytte bruker?

En bruker trenger tillatelsen edit_users for å kunne bytte brukerkonti. Som standard er det bare Administrator som har denne tillatelsen og på Mulitsite er det bare Super-admin som har denne tillatelsen.

Kan muligheten til å bytte bruker gjøres gjeldende for andre bruker-roller?

Yes. The switch_users meta capability can be explicitly granted to a user or a role to allow them to switch users regardless of whether or not they have the edit_users capability. For practical purposes, the user or role will also need the list_users capability so they can access the Users menu in the WordPress admin area.

If you know what you’re doing with user capabilities, this capability can also be denied from a user or role to prevent the ability to switch users, regardless of whether or not they have the edit_users capability.

Does this plugin allow a user to frame another user for an action?

Potentially yes, but User Switching includes some safety protections for this and there are further precautions you can take as a site administrator:

  • User Switching stores the ID of the originating user in the new session for the user they switch to. Although this session does not persist by default when they subsequently switch back, there will be a record of this ID if your MySQL server has query logging enabled.
  • User Switching stores the login name of the originating user in an authentication cookie (see the Privacy Statement for more information). If your server access logs store cookie data, there will be a record of this login name (along with the IP address) for each access request.
  • You can install an audit trail plugin such as Simple History, WP Activity Log, or Stream, all of which have built-in support for User Switching and all of which log an entry when a user switches into another account.
  • User Switching triggers an action when a user switches account, switches off, or switches back (see below). You can use these actions to perform additional logging for safety purposes depending on your requirements.

One or more of the above should allow you to correlate an action with the originating user when a user switches account, should you need to.

Bear in mind that even without the User Switching plugin in use, any user who has the ability to edit another user can still frame another user for an action by, for example, changing their password and manually logging into that account. If you are concerned about users abusing others, you should take great care when granting users administrative rights.

Kan vanlige administratorer på et nettverk (Mulitsite) bytte brukerkonto?

Nei. Dette kan aktiveres ved å installere utvidelsen User Switching for Regular Admins.

Kan jeg bytte bruker direkte fra verktøyraden i admin?

Ja,det er en tredjepart tilleggsutvidelse for dette: Brukerbytting i verktøyraden.

Blir en «action hook» trigget når en bruker bytter konto?

Yes. When a user switches to another account, the switch_to_user hook is called:

/**
 * Fires when a user switches to another user account.
 *
 * @since 0.6.0
 * @since 1.4.0 The `$new_token` and `$old_token` parameters were added.
 *
 * @param int    $user_id     The ID of the user being switched to.
 * @param int    $old_user_id The ID of the user being switched from.
 * @param string $new_token   The token of the session of the user being switched to. Can be an empty string
 *                            or a token for a session that may or may not still be valid.
 * @param string $old_token   The token of the session of the user being switched from.
 */
do_action( 'switch_to_user', $user_id, $old_user_id, $new_token, $old_token );

When a user switches back to their originating account, the switch_back_user hook is called:

/**
 * Fires when a user switches back to their originating account.
 *
 * @since 0.6.0
 * @since 1.4.0 The `$new_token` and `$old_token` parameters were added.
 *
 * @param int       $user_id     The ID of the user being switched back to.
 * @param int|false $old_user_id The ID of the user being switched from, or false if the user is switching back
 *                               after having been switched off.
 * @param string    $new_token   The token of the session of the user being switched to. Can be an empty string
 *                               or a token for a session that may or may not still be valid.
 * @param string    $old_token   The token of the session of the user being switched from.
 */
do_action( 'switch_back_user', $user_id, $old_user_id, $new_token, $old_token );

When a user switches off, the switch_off_user hook is called:

/**
 * Fires when a user switches off.
 *
 * @since 0.6.0
 * @since 1.4.0 The `$old_token` parameter was added.
 *
 * @param int    $old_user_id The ID of the user switching off.
 * @param string $old_token   The token of the session of the user switching off.
 */
do_action( 'switch_off_user', $old_user_id, $old_token );

In addition, User Switching respects the following filters from WordPress core when appropriate:

  • login_redirect when switching to another user.
  • logout_redirect when switching off.

Vurderinger

10. februar, 2020
I use this plugin for development to test output in the backend for various user roles. Awesome tool to switch between users instantly and without hassle, easy to use, prefectly crafted. Love it. ❤️
Les alle 182 vurderinger

Bidragsytere og utviklere

“Brukerbytting” er programvare med åpen kildekode. Følgende personer har bidratt til denne utvidelsen.

Bidragsytere

“Brukerbytting” har blitt oversatt til 42 språk. Takk til oversetterne for deres bidrag.

Oversett “Brukerbytting” til ditt språk.

Interessert i utvikling?

Bla gjennom koden, sjekk ut SVN-repositoriet, eller abonner på utviklingsloggen med RSS.

Endringslogg

1.5.5

  • Added the user_switching_in_footer filter to disable output in footer on front end. Thanks @pierreminik.
  • Documentation additions and improvements.

1.5.4

  • Fix a cookie issue caused by Jetpack 8.1.1 which prevented switching back to the original user.

1.5.3

  • Remove usage of a method that’s been deprecated in WordPress 5.3

1.5.2

  • Set the correct lang attribute on User Switching’s admin notice.
  • Move the WooCommerce session forgetting to an action callback so it can be unhooked if necessary.

1.5.1

  • Add appropriate HTTP response codes to the error states.
  • Display User Switching’s messages in the original user’s locale.
  • Increase the priority of the hook that sets up the cookie constants. See #40.
  • Don’t attempt to output the ‘Switch To’ link on author archives when the queried object isn’t a user. See #39.

1.5.0

  • Add support for forgetting WooCommerce sessions when switching between users. Requires WooCommerce 3.6+.

1.4.2

  • Don’t attempt to add the Switch To link to the admin toolbar when viewing an author archive in the admin area. This prevents a fatal error occurring when filtering custom post type listing screens by authors in the admin area.

1.4.1

  • Add a Switch To link to the Edit User admin toolbar menu when viewing an author archive.
  • Add a Switch back link to the Edit User admin toolbar menu when viewing an author archive and you’re already switched.

1.4.0

  • Add support for user session retention, reuse, and destruction when switching to and back from other user accounts.
  • Add support for the switch_users meta capability for fine grained control over the ability to switch user accounts.
  • More code and documentation quality improvements.

1.3.1

  • Add support for the X-Redirect-By header in WordPress 5.0.
  • Allow User Switching’s admin notices to be dismissed.
  • Introduce a privacy statement.

1.3.0

  • Update the BuddyPress compatibility.
  • Various code and inline docs improvements.

1.2.0

  • Improve the Switch Back functionality when the interim login window is shown.
  • Always show the Switch Back link in the Meta widget if it’s present.

1.1.0

  • Introduce a user_switching_switched_message filter to allow customisation of the message displayed to switched users in the admin area.
  • Switch to safe redirects for extra paranoid hardening.
  • Docblock improvements.
  • Coding standards improvements.

0.6.2

  • Polish translation by Bartosz Arendt.

0.6.1

  • Slovak translation by Max Samael.

0.6

  • More intuitive redirecting after switching.
  • Avoid a BuddyPress bug preventing Switch To buttons from appearing.
  • Added a template function: current_user_switched() which lets you know if the current user switched into their account.
  • Added some hooks: switch_to_user, switch_back_user and switch_off_user, fired when appropriate.

0.5.2

  • Farsi (Persian) translation by Amin Ab.
  • Display switch back links in Network Admin and login screen.
  • Avoid a BuddyPress bug preventing Switch To buttons from appearing.

0.5.1

  • Toolbar tweaks for WordPress 3.3.

0.5.1.1

  • Chinese Simplified translation by Sparanoid.

0.5.1.2

  • German translation by Ralph Stenzel.

0.5

  • New «Switch off» function: Log out and log instantly back in again when needed (see the FAQ).

0.4.1

  • Support for upcoming changes to the admin bar in WordPress 3.3.

0.4

  • Add some extended support for BuddyPress.
  • Add some extended support for Multisite.
  • Fix a permissions problem for users with no privileges.
  • Fix a PHP warning when used as a mu-plugin (thanks Scribu).

0.3.2

  • Fix the ‘Switch back to’ menu item in the WordPress admin bar (WordPress 3.1+).
  • Fix a formatting issue on the user profile page.

0.3.1

  • Prevent admins switching to multisite super admin accounts.

0.3

  • Adds an admin bar menu item (WordPress 3.1+) for switching back to the user you switched from.

0.2.2

  • Respect the current ‘Remember me’ setting when switching users.
  • Redirect to home page instead of admin screen if the user you’re switching to has no privileges.

0.2.1

  • Edge case bugfix to prevent ‘Switch back to…’ message appearing when it shouldn’t.

0.2

  • Functionality for switching back to user you switched from.

0.1

  • Første utgivelse.