User Roles and Permissions

Scottsdale Mint uses a multi-tier role system combining WordPress's built-in roles, WooCommerce roles, and custom roles specific to the site's business requirements.

---

Default WordPress Roles

Role	Description
administrator	Full access to WordPress and WooCommerce admin; 2FA mandatory
editor	Can manage pages and posts; limited WooCommerce access
author	Can publish own posts
contributor	Can write but not publish
subscriber	Customer-level access; can log in and view My Account

---

WooCommerce Roles

Role	Key Capabilities
shop_manager	WooCommerce full access (orders, products, settings); 2FA mandatory
customer	Default registered customer role; can place orders, track, and manage account

---

Custom Roles

dealer

Property	Value
Registered by	suma-elementor theme or a custom plugin
Purpose	Wholesale/dealer customers who receive tiered pricing
Key differences	See dealer-tier prices instead of retail prices; may have volume discount overrides
Access	Same as customer role for WooCommerce; pricing logic checks for this role

compliance_officer

Property	Value
Registered by	Custom roles setup (in theme or dedicated plugin)
Purpose	Review KYC documents and approve/reject KYC-pending orders
Key capabilities	Can view restricted S3 KYC document links; can change wc-kyc-pending order status; cannot manage products or settings
Access	Limited WooCommerce admin — orders only

warehouse_manager

Property	Value
Registered by	Custom roles setup
Purpose	Warehouse team — view and ship orders
Key capabilities	Can view orders; can add tracking numbers; cannot modify prices or settings

---

Role-Capability Matrix

Capability	admin	shop_manager	compliance_officer	warehouse_manager	dealer	customer
Manage products	✅	✅	❌	❌	❌	❌
Manage orders	✅	✅	✅ (limited)	✅ (limited)	❌	❌
Add tracking numbers	✅	✅	❌	✅	❌	❌
View KYC documents	✅	❌	✅	❌	❌	❌
WooCommerce settings	✅	✅	❌	❌	❌	❌
WordPress settings	✅	❌	❌	❌	❌	❌
Place orders	✅	✅	✅	✅	✅	✅
Dealer pricing	❌	❌	❌	❌	✅	❌
View own orders	✅	✅	✅	✅	✅	✅

---

Dealer Pricing Logic

The dealer role enables tiered pricing on the front-end:

// In \Suma\Product\Pricing
public function get_customer_discount_tier(): string {
    if ( ! is_user_logged_in() ) {
        return 'retail';
    }

    $user = wp_get_current_user();

    if ( in_array( 'dealer', $user->roles, true ) ) {
        return 'dealer';
    }

    return 'retail';
}

Dealer pricing rates are configured in the WooCommerce product editor or in a global discount settings page.

---

2FA by Role

The WP 2FA Premium plugin enforces 2FA based on role:

Role	2FA Required
administrator	Yes — cannot skip
shop_manager	Yes — cannot skip
compliance_officer	Yes — cannot skip
warehouse_manager	Recommended (configurable)
dealer	Optional
customer	Optional

---

Managing Roles

Roles can be managed via:

1. WP Admin → Users → Edit User — change role per user
2. WP-CLI:

   wp user update 42 --role=dealer

3. Custom roles are registered in code — they persist across environments via the database but are registered by register_activation_hook or init action in the plugin/theme

---

Related Resources

• KYC Documentation — compliance_officer role usage
• Security — 2FA enforcement details