Dreamfox Client Edit Mode

Description

Dreamfox Client Edit Mode is built for agencies and freelancers who deliver WordPress sites and then hand them over. Your client gets a restricted Client Editor role: they can update text, swap images and change links on exactly the pages you assign — and nothing else. Layout, styling and page structure are locked, and the lock is enforced on the server, not just hidden in the editor UI.

How it works

1. Protect the pages the client may edit.
2. Assign one or more Client Editor users to those pages.
3. Choose per page (and optionally per user) whether text, images and links may be changed.

Every save by a Client Editor is compared against the stored page by a permission diff engine: only allowed changes go through. Adding, removing, moving or restyling elements is rejected with a clear message — the layout you delivered cannot be broken.

Server-side enforcement

The editor UI is locked down for the role (content-only editing, no style panels, no block inserter), but that is comfort, not the security. The real protection runs on the server on every save route:

• The block editor’s REST save — rejected with a clear per-violation error in the editor.
• Classic admin saves and XML-RPC — a late wp_insert_post_data guard.
• Page-level access — map_meta_cap pins Client Editors to their assigned protected pages; everything else (including deleting and creating posts) is denied.
• Elementor-built pages — Client Editors can open the Elementor editor, and saving plus direct _elementor_data writes are validated the same way as everywhere else.

What the client sees

• A simplified admin: a My Pages screen with an Edit button per assigned page, irrelevant menus and toolbar items hidden.
• An optional “Edit this page” toolbar link on their assigned pages.
• Clear error messages when a change is not allowed, instead of a broken layout.

What you keep

• Every allowed change creates a normal WordPress revision — nothing is ever overwritten without a trace.
• An activity log of allowed and blocked saves (summaries only: element IDs and attribute names, never full content, never IP addresses), with configurable retention.
• Text / image / link permissions per page, with per-user overrides.

Built by Dreamfox Media. Guides and frequently asked questions are in the knowledge base; need help? Contact support.

Technical details