WooCommerce (Pro) — Pro
Products read and written; orders and customers read only, and always will be. A shop’s order history is a financial record, and there is no operation in the pair that could reach one indirectly.
Shops with a catalogue big enough that descriptions and pricing are a job, and an owner who would never let an agent near an order.
Each of these is carried by named operations that exist in the release you can download today. The ids under every answer are the calls involved — nothing here is a plan.
Products are listed by category and updated individually, each write previewed and snapshotted.
product-category-list needs edit_products product-list needs edit_products product-update needs edit_products, re-checked as edit_product against the resolved product Orders and customers gate on manage_woocommerce alone, because they carry personal and financial data that product-editing rights should not open.
order-list needs manage_woocommerce order-get needs manage_woocommerce customer-list needs manage_woocommerce It refuses, and explains that a variable product’s price lives on its variations — rather than writing a value the shop would ignore.
product-get needs edit_products product-create needs edit_products Products read and edited; orders and customers read only, and always will be.
Needs: SiteHelm Pro on a licensed site, and WooCommerce 8.0 or newer. Where it is absent the operation refuses by name, rather than failing obscurely.
6 operations that only report. A read still asks WordPress for a capability against the object.
2 that change something — each one previewed as a diff, snapshotted, verified by reading the site back, and reversible from wp-admin.
This area is part of the Pro add-on. On an unlicensed site every call here refuses with IntegrationUnavailable rather than quietly doing nothing.
There is no order-update, no order-status-set and no customer write. Not in a higher tier, not behind a switch.
There is no order-update, no order-status-set and no customer write. A shop’s order history is a financial record, and the dispatcher pair carries no operation that could reach one indirectly.
Orders and customers gate on manage_woocommerce alone, because they carry personal and financial data that product-editing rights should not open.
A variable product’s price lives on its variations. product-get says so, and product-update refuses a price change on one rather than writing a value the shop will ignore.
Get the free plugin What Pro costs How a write is guarded
The everyday work an editor does by hand: drafting, updating, restructuring, fixing links. An agent can do all of it, one addressed block at a time, and you see the diff before anything lands.
17 opsEvery area of the catalogue, by what it lets you do.
indexEvery operation on the site in one list, with capability, risk and rollback.
reference