Is there a minimal version of WPMU Dashboard?

I need a way to install the WPMU dashboard plugin into my clients' sites without my clients being able to take advantage of my WPMU membership beyond updating the plugins and themes that I install into their sites during development. I also want no way for clients to view my WPMU membership details.

As far as I can tell, when one of my clients clicks the WPMU Dashboard menu in WP Admin, the client is able to view my WPMU username, support points and forum question as-well-as being able to install plugins & install themes. This is bad from a data protection viewpoint and the ease of access my clients have to my WPMU membership benefits provides value to my clients that I usually charge them for (i.e the benefit of my expertise and paid licenses).

I know I can add code to wp-config.php to hide the dashboard but this does not help when a client or another developer deletes that code.

Is there a less functional WPMU Dashboard plugin? One that only updates plugins and themes and provides no WPMU dashboard access?

  • aristath
    • Recruit

    Hello there @DDV, I hope you're well today!

    There is no dashboard- "lite" version, but we do have some constants that you can use in your wp-config.php file to make this work the way you want it.

    Simply add this line to your wp-config.php file, right above the line that says
    /* That’s all, stop editing! Happy blogging. */

    define(‘WPMUDEV_HIDE_BRANDING’, true);

    That will completely hide the plugin, but you'll still be able to update our plugins and themes.

    I hope that helps!

    Cheers,
    Ari.

  • DDV
    • Design Lord, Child of Thor

    Thanks for replying Ari.

    The constants are no good. They can be easily removed by clients and other developers or by a fresh install of the WordPress scripts.

    Any chance a lite version will be released any time soon?

  • aristath
    • Recruit

    In that case, you can simply add that line inside the plugin itself!

    Just edit the plugin file and right before the line that says
    class WPMUDEV_Dashboard {
    add this:
    define(‘WPMUDEV_HIDE_BRANDING’, true);

    This way it will be simply hard-coded.

    No, I'm afraid there are no plans to release a light version of the plugins, because you can already lock the Dashboard to your user, and there already constants to hide them.

    Cheers,
    Ari.

  • Patricia BT
    • Connector

    I'm sorry if I interfere in something I understood wrong, but do you give your admin login to the client?
    if no, you stay the first admin, and only you can access the WPMU Dashboard, then you give admin rights to another user if you want your customer to have admin rights as well for other tasks, he won't have access to the WPMU Dashboard, (right @aristath ?)

    and if you talk about another developer, do you mean you do not maintain the site yourself anymore? in that case, it would be good that you remove your WPMU credentials anyway, because the client then shouldn't have access to the updates if they are not your customer anymore. (at least that's how I understand things)

    Cheers

  • DDV
    • Design Lord, Child of Thor

    Hi Patricia,

    I like to ensure my clients can maintain their sites with or without me and without access restrictions. My company is hired to build and maintain sites. Those sites belong to our client, not to us :slight_smile:

  • Patricia BT
    • Connector

    I understand DDV

    My feeling is either you maintain the site, and you use the tool YOU pay for, or they maintain the site and then have to pay for continuous support and their own API.

    And BTW I totally agree I would not want to give them access to my own dashboard. And also with my above solution they are also admin but just not in your account.

    Anyway :slight_smile: It's just a personal opinion I hope you don't mind.

  • DDV
    • Design Lord, Child of Thor

    I don't mind, Patricia. I always listen to advice: never know when it will come in handy :slight_smile:

    For the WPMU guys,

    With regard to hiding the WPMU dashboard, I've always known how to do that. That isn't the issue. I thought about the advice given above re placing the define constants into the plugin code itself but.... what happens when the dashboard plugin is updated? :p

    I could rename the dashboard plugin and place the constants within it so as to hide it from view and prevent it ever updating but I'd prefer a lite version of WPMU dashboard.

    We need a lite version that,

    1) shows the installed WPMU plugins,
    2) lets developers add a personal 'get in touch for support' message,
    3) allows the plugins/themes to be upgraded,

    but

    4) does not allow a developer's clients to install additional WPMU plugins and themes, and
    5) does not give a developer's clients access to the developer's WPMU control panel, download history, forum use history and payment history.

    It is all good to say that the WPMU dashboard can be hidden or removed once a developer stops supporting his/her client but the WPMU Dashboard can still be unhidden at any time, even when a developer is still supporting his/her clients.

    I believe many developers will agree with me here when I say that the WPMU Dashboard plugin does not do enough to secure a developer's WPMU life from prying eyes.

    Thanks guys.

  • aristath
    • Recruit

    With regard to hiding the WPMU dashboard, I've always known how to do that. That isn't the issue. I thought about the advice given above re placing the define constants into the plugin code itself but.... what happens when the dashboard plugin is updated? :p

    I could rename the dashboard plugin and place the constants within it so as to hide it from view and prevent it ever updating but I'd prefer a lite version of WPMU dashboard.

    You could simply create a new php file in your wp-content/mu-plugins folder.
    Just create a file called "customizations.php" in that folder and put the below code in it:

    <?php
    
    define(‘WPMUDEV_HIDE_BRANDING’, true);

    save that and now it will be loaded by default.

    1) shows the installed WPMU plugins,

    Users can see the installed WordPress plugins from their "plugins" menu

    2) lets developers add a personal 'get in touch for support' message,

    You can use our Support System plugin for that: https://premium.wpmudev.org/project/support-system/

    3) allows the plugins/themes to be upgraded,

    The fact that the dashboard is hidden doesn't mean that users can't update their plugins... they can!

    4) does not allow a developer's clients to install additional WPMU plugins and themes, and
    5) does not give a developer's clients access to the developer's WPMU control panel, download history, forum use history and payment history.

    The WPMUDEV Dashboard plugin is "locked" to the user that activated it, and that's you. You should NOT give your own account to clients, they should have a separate account.
    If however your client uses your account, then you can create another dummy user that will serve as the WPMUDEV Dashboard owner by adding this line in your customizations.php file that I mentioned above:
    define('WPMUDEV_LIMIT_TO_USER', '32');
    where '32' is the ID of the user you want to use for that.

    It is all good to say that the WPMU dashboard can be hidden or removed once a developer stops supporting his/her client but the WPMU Dashboard can still be unhidden at any time, even when a developer is still supporting his/her clients.

    If your clients are super smart and figure out how to show the WPMUDEV Dashboard plugin yes, they can.
    That's why it's best not to give your own account to other people as I mentioned above.
    If you do that, then no matter how hard they try, they'll have to
    1) figure out how to show the dashboard
    2) hack your account and gain access to it.
    If they are that smart, then they probably can write the plugins on their own. They don't need WPMUDEV ones...

    I believe many developers will agree with me here when I say that the WPMU Dashboard plugin does not do enough to secure a developer's WPMU life from prying eyes.

    We do what can be done.
    If however you give out your account to others then there's nothing we can do about that!

    We've integrated as many security measures as humanly possible and there are lots of ways to prevent your clients from gaining access to your WPMUDEV account, but at the end of the day it all comes down to what you, as a site developer to protect your own privacy and not give out your own account.

    Cheers,
    Ari.

  • Kingdom Studios
    • The Bug Hunter

    Just so I am clear...

    If I have a multisite and I am the only super-admin and I set up a client with a subdomain site with admin access to that site only, and they have access to some of the WPMU Dev plugins through Pretty Plugins, am I inside or outside of the licensing agreement?

    Regards,

    Martin

  • Dev4
    • Champion of Loops

    Hi Martin,

    You should probably ask a question like that on it's own thread.
    It is not really on the topic of this one,,, though it is a little bit related.

    At any rate, you would be within the license because you are the only one using the api and you are not giving access to your account to anyone else.

    You installed the plugins, and gave users the abiliy to turn them on for their sites

  • Dev4
    • Champion of Loops

    On the minimal version of the dashboard question,,,
    It might make sense to develop something like that,,, and license it separately.
    With the developer as the affiliate, and the user getting updates only through the pannel.... With thier own -" updates only " license,

    That way everyone wins
    The client gets updates
    The developer gets comissions
    Wpmudev gets a paying - lite - user

Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.