Temporary Support Access Links

These settings define your secure administrative routing topology, allowing you to grant restricted, passwordless dashboard logins to developers, support representatives, or specialists without sharing site credentials.

The panel is fully managed under the Temporary Access Links tab inside your Wawp settings page.

📌 How to Access

To configure or manage your support links:

1. Log in to your WordPress administrative dashboard.
2. Navigate to Wawp from the sidebar menu.
3. Select the Authentication Pages section.
4. Click on the Temporary Access Links tab.

1. Generating a Secure Support Link

When setting up a new support login, you specify the target scope, limits, and IP address constraints.

• Authentication Mode: Choose whether the visitor logs in via a dynamically created user role or directly as an existing user account.
  • Group Role: Dynamically generates a temporary, sandboxed user account matching a specific role (e.g., Administrator, Editor, Shop Manager) upon their first click. This account is automatically deleted from your database when the session expires or is terminated.
  • Specific User: Authenticates the temporary login directly into an existing, registered WordPress user account.
• Link Label: Give the link a descriptive name (e.g., Theme Developer, WooCommerce Specialist) to recognize it inside your dashboard.
• Allowed IP: Lock the link to a specific IP address. Requests originating from any other IP address will be instantly blocked.
• Expiration Duration: Specify the link's active lifespan in hours (e.g., 2 hours, 24 hours).
• Maximum Click Usage: Define the maximum number of successful logins allowed. For instance, a one-time link (Max Clicks: 1) expires immediately after its first use.

2. Real-Time Security Restrictions

You can configure granular permission filters to lock down specific capabilities and protect sensitive data before delivering the link.

• Disallow File Editing: Enforces strict security by defining DISALLOW_FILE_EDIT dynamically. This completely blocks the temporary developer from editing theme or plugin files through the WordPress dashboard.
• Disallow Financial & WooCommerce Access: Automatically masks sensitive WooCommerce tabs (Settings, Reports, Status) and prevents access to shop revenue data.
• Disallow Plugin & Theme Actions: Blocks installing, activating, deactivating, or deleting plugins and themes on your site.
• Disallow Global Settings Edit: Blocks modifying general WordPress settings, reading configuration options, and changing critical settings fields.

3. Real-Time Audit Logs

Every single administrative action performed by the temporary support developer is tracked in real-time. You can view these logs by clicking View Activity Logs in the actions dropdown next to each link.

Events Tracked Include:

• Successful Login: Logins using temporary links (including IP address and Browser User-Agent).
• Page Visits: Every administrative page path they view (debounced to keep logs readable).
• Blocked Attempts: Instant log entries created when a restricted page or action is attempted.
• Plugin & Theme Actions: Installation, activation, deactivation, and deletion of plugins/themes.
• System Upgrades: System core or extension upgrades.

4. Active Link & Session Management

Administrators have full real-time command over all generated links from the actions dropdown:

• Regenerate: Instantly resets the secure token, resets click count to 0, updates expiration date, and purges the old temporary user account, rendering the old URL completely useless.
• Revoke Link: Instantly prevents any new logins and logs out any active session.
• Delete Link: Permanently deletes the link record from your database, force-deletes the dynamic support user account, and terminates all active sessions instantly.
• Force Logout: Disconnects the active support session instantly and logs out the developer.

5. High-Visibility Security Badges

Wawp provides clear administrative indicators when a temporary session is running to ensure transparency:

• Admin Dashboard Banner: Displays a notice at the top of the WordPress admin panel for other administrators, warning them that an active temporary session is currently running on the site, complete with a quick "Force Logout & Terminate Session" button.

• Green "Temp access" Badge: When a temporary support user is logged in, a prominent green badge is rendered next to Wawp in the top WordPress Admin Bar:

  $$\text{\colorbox{#16a34a}{\color{#ffffff}{\ \textbf{Temp access}\ }}}$$

  This serves as a constant reminder to the logged-in support developer that they are browsing via a temporary, restricted support session.