Custom Content Types permissions

Configure role-based access control for custom tables and table groups.

ACPT's CCT permission system lets you control which WordPress roles can read, create, update, and delete records in each custom table, and who can read or edit table groups.

Accessing CCT permissions

You can reach the permissions configuration from two places:

1. ACPT → Permissions Manager → Custom Content Types

2. The Permissions button on the View Table or View Table Group page

Table capabilities

Each table exposes four capabilities:

Capability	Description
read	View the records list and individual record details.
create	Add new records.
update	Edit existing records.
delete	Delete records.

Table Group capabilities

Capability	Description
read	View the table group and its tables in context (e.g. on a post edit screen).
edit	Edit table group settings (name, location rules, display mode).

Configuring permissions

1. Navigate to the permissions screen for a table or table group.

2. For each WordPress role, check or uncheck the capabilities you want to grant or deny.

3. Click Save.

Granting the Editor role read/create access on the movies table.

ACPT applies the capability changes to WordPress roles immediately on the next admin_init.

Default behaviour

When no permissions are configured, all logged-in WordPress users can perform all operations. Permissions are opt-in — only configure them when you need to restrict access.

WordPress capability naming

ACPT registers the capabilities using this pattern:

{capability}_{tableName}

For a table named movies:

ACPT capability	WordPress capability
read	read_movies
create	create_movies
update	update_movies
delete	delete_movies

These can be checked in your own code using the standard WordPress current_user_can() function:

if (current_user_can('create_movies')) {
    // show the "Add movie" button
}

See also

• CCT Permissions — overview of the permission model

• Custom post types permissions

• Meta fields permissions