Permissions Settings

The Permissions tab controls how many pastes users can create per hour, and shows the WordPress Abilities registered by SnipShare.

Navigate to SnipShare → Settings → Permissions.

---

Rate Limiting

Paste Rate Limit

Maximum number of new pastes a single user can create within a rolling 60-minute window. Applies to all non-administrator users.

• Default: 20 pastes per hour
• Range: 1–1000

When a user hits the rate limit, the REST API returns a 429 Too Many Requests response and the create form shows an error message.

Rate limiting uses WordPress transients stored per-user. Administrators bypass the rate limit entirely.

---

Registered Abilities

SnipShare registers 5 abilities with the WordPress Abilities API under the snipshare category. These control what logged-in users can do.

Ability Slug	Label	Description	Default Role Requirement
snipshare/create-paste	Create Pastes	Submit new pastes to the platform	subscriber (all logged-in users)
snipshare/fork-paste	Fork Pastes	Clone another user’s public paste	subscriber (all logged-in users)
snipshare/manage-paste	Manage Own Pastes	Edit and delete own pastes	subscriber (all logged-in users)
snipshare/moderate	Moderate Pastes	Review reports, trash any paste	editor and above
snipshare/create-collection	Create Collections	Create and manage snippet collections	contributor and above

Default Role Mappings

Ability	subscriber	contributor	author	editor	administrator
create-paste	✅	✅	✅	✅	✅
fork-paste	✅	✅	✅	✅	✅
manage-paste	✅	✅	✅	✅	✅
moderate	❌	❌	❌	✅	✅
create-collection	❌	✅	✅	✅	✅

Customising Ability Assignments

Role-to-ability mappings can be adjusted via the WordPress Abilities API UI (if your WordPress version includes it): navigate to the Abilities management screen and adjust which roles hold each snipshare/* ability.

Developers can also override ability assignments via PHP - see Hooks & Filters in the Developer Guide.

---

Notes

• Guest (non-logged-in) users cannot create, edit, delete, fork, or star pastes regardless of ability settings.
• Paste visibility (public/unlisted/private) is enforced separately from ability checks.
• The snipshare/moderate ability grants the user access to the Moderation admin page and the ability to trash any paste regardless of ownership.