Site settings

Settings an agent can change, listed in full.

Thirteen fields and no more: title, tagline, timezone, date and time formats, posts per page, front-page geometry, permalinks, discussion defaults and search-engine visibility. The allowlist is the whole feature.

Anyone setting up sites repeatedly, who wants the boring configuration done and nothing else touched.

2 jobs

What people actually ask for.

Each of these is carried by named operations that exist in the release you can download today. The ids under every answer are the calls involved — nothing here is a plan.

“Set the timezone, the date format and the front page.”

Each field is validated against its own rule, previewed, and snapshotted like any other write.

  • site-settings-set needs manage_options

“What is this site currently set to?”

The read returns exactly the thirteen fields the write can change, so the readable surface and the writable surface are the same list.

  • site-settings-read needs manage_options
The shape of it

2 operations, 1 of them reads.

Thirteen fields, allowlisted: title, tagline, timezone, date and time formats, posts per page, front-page geometry, permalinks, default discussion settings, and search-engine visibility.

Nothing extra to install. This module runs on core WordPress alone.

Every operation, with its policy

Reads

1 operations that only report. A read still asks WordPress for a capability against the object.

Writes

1 that change something — each one previewed as a diff, snapshotted, verified by reading the site back, and reversible from wp-admin.

Tier

Free, permanently. Nothing in this area moves into a paid tier later.

The limit

What it will not do here.

Changing the permalink structure rewrites every URL on the site. It is in the allowlist because owners genuinely do change it — and it is snapshotted like everything else.

Note 1

The allowlist is the whole feature. site-settings-read returns exactly the thirteen fields site-settings-set can change, so the readable surface and the writable surface are the same list.

Note 2

Changing the permalink structure rewrites every URL on the site. It is in the allowlist because owners do change it — and it is snapshotted like everything else.

Next

Try it, or read further.

Get the free plugin How a write is guarded