Permissions

Bulk Editor opens each editor to the people WordPress already lets edit that kind of record, so there are no new roles to set up. Each one checks the capability WooCommerce's own screens use:

• Products, the Dashboard and the Bulk edit button on the Products list: edit_products
• Orders: edit_shop_orders
• Coupons: edit_shop_coupons
• Reviews: moderate_comments
• Settings: manage_options

By default an administrator has all of these. WooCommerce's Shop manager role has the four editor capabilities but not manage_options, so a shop manager can use every editor and cannot change Bulk Editor's settings. On the Dashboard, an editor somebody cannot open is shown greyed out.

Each row is also checked against the person's right to edit that specific record, the same check WordPress makes on the record's own edit screen, and an export holds only what that person may edit. Two more limits:

• A download URL outside WooCommerce's approved directories is refused unless the person is an administrator, exactly as on the product screen.
• A shared saved view can be renamed or deleted only by the person who saved it, or by somebody who manages the site.

Developers can change the capability an editor asks for with the trbe_capability filter, which receives the capability and the editor's name: products, orders, coupons or reviews.