UpStream Advanced Permissions

Description

The Advanced Permissions addon controls who can view, edit, create, and delete each UpStream object, also reaching down to individual fields and comment rules, with centralized configuration in a single XML file. It is aimed at those who deliver UpStream dashboards to clients or external teams and need to restrict access by user role or specific user, making fields visible, hidden, or read-only according to the profile.

Main Features of Advanced Permissions

• Object-level permissions
  Defines rights to view, edit, create, and delete any UpStream object.
• Field-level control
  Marks each field as visible, hidden, or read-only by access profile.
• Comment rules
  Defines who can write and read comments in each object.
• Granularity by role or user
  Applies rules to both WordPress roles and individual users.
• XML-based configuration
  Centralizes all permission rules in a single, versionable XML file.

Benefits of Advanced Permissions

• Clean dashboard per client
  Each client sees only the fields and objects related to their own project.
• Sensitive data protected
  Costs, budgets, and internal notes remain invisible to external profiles.
• Flexible access layers
  Even the same user can have different rights on different types of objects.
• Reusable rules
  The XML can be reused across installations to standardize access policies.

Who is the Advanced Permissions for?

• Agencies that deliver the UpStream dashboard to clients and need to hide internal information.
• Teams that mix internal staff and freelancers on the same project and want to isolate visibility.
• Users who already use UpStream and need to restrict access to sensitive fields such as budget, cost, or private notes.

How to Download the Advanced Permissions

The Advanced Permissions addon is available for download here at Ultrapack. After downloading the .zip file, install it via Plugins > Add New > Upload Plugin, select the file and activate with UpStream already present on the site. From then on, simply upload the XML file with the permission rules defined for each role or user.

In projects with multiple profiles accessing the same dashboard, the Advanced Permissions addon transforms UpStream’s access control into a declarative policy, described in XML and consistently applied to objects, fields, and comments. This avoids repetitive manual configuration in the dashboard and reduces the risk of exposing the wrong fields to those who should not see them, in environments where the separation between internal and external needs to be auditable.

Frequently asked questions