JiffyTrade introduces a role layer that sits above normal WordPress role logic:

Plugin Super Administrators

This ensures critical business controls remain protected — even if WordPress roles change.

🧱 WordPress Administrator (Default Role)

A standard WordPress Administrator:

• Can manage WordPress settings
• Can install plugins
• Can manage users
• Has high-level site control

However:

Being a WordPress Administrator does not automatically guarantee full control of JiffyTrade.

JiffyTrade permissions are governed by RBAC settings.

👑 What Is a Plugin Super Administrator?

A Plugin Super Administrator is a user explicitly recognised by JiffyTrade as having full plugin authority.

They:

• Bypass RBAC minimum-role restrictions
• Retain control of plugin configuration
• Cannot accidentally lock themselves out of core controls
• Maintain recovery authority

This is a plugin-level authority — not a WordPress core role.

🔐 Why This Layer Exists

Without this distinction:

• An Administrator could misconfigure RBAC
• Locking and deletion controls could become inaccessible
• Backup access could be removed
• The plugin could become effectively unusable

Plugin Super Administrators prevent:

✔ Total lockout
✔ Accidental permission deadlocks
✔ Loss of system control

🛡 Override Behaviour

When RBAC minimum roles are set:

• Normal users must meet the configured role requirement.
• Plugin Super Administrators are not restricted by those minimums.

Example:

If you set:

“Mark invoices as paid” → Minimum role: Manager

A Plugin Super Administrator can still mark invoices as paid regardless of role hierarchy.

This ensures system governance remains recoverable.

🔄 Recovery Safeguard

If RBAC settings are misconfigured:

• Plugin Super Administrators retain access to:
  • Permissions (RBAC)
  • Plugin Config
  • Backup & Restore
  • Critical financial controls

This prevents the plugin from being bricked by overly restrictive settings.

⚠ Important Clarification

Plugin Super Administrator is:

• Not automatically every WordPress Administrator
• Not a replacement for WordPress roles
• Not a visible WordPress role in the Users table

It is a plugin-level control layer.

You decide who holds that authority.

🧠 Best Practice

For most businesses:

• Limit Plugin Super Administrator status to business owners
• Do not assign this to general staff
• Keep at least one trusted account with Super Administrator authority

This ensures:

✔ Governance integrity
✔ Recovery safety
✔ Financial protection
✔ Controlled deletion rights

🎯 Why This Matters

JiffyTrade handles:

• Financial records
• Tax-relevant data
• Legal documents
• Customer agreements

Those require system-level control beyond default WordPress permissions.

The Plugin Super Administrator layer ensures ultimate authority remains stable and protected.