Client account area
Client Portal Access
Each client signs in to a profile that holds account details, shipping and billing information, and invoice records. Access depends on the account role and status.
Clients who see a generic notice should contact the site administrator for account status.
Account status
Roles and account states
Active client
The mcl_client role reads the portal with read capability only. Administrators also pass the client check.
Pending and rejected
The mcl_pending and mcl_rejected roles hold no capabilities. Sign-in returns the same generic authentication error for both.
Disabled accounts
The mcl_disabled role holds no capabilities. It receives the same generic message, so account state is never disclosed.
Access rules
Redirects and visibility
Clients are sent from wp-admin to the Portal page, and the admin bar stays hidden for them. REST user listing and ?author=N lookups are blocked, and login errors stay generic.
Client checks use mcl_is_client($uid), which accepts the mcl_client role or administrator accounts.