Settings and security¶
Where settings live¶
Free includes the Scanner, Fixers, AI Alt Text, Statement, and Rules tabs under AcceGuru -> Settings. Pro adds Dismissed, Reports, and role-based dismiss controls.
How your data is handled¶
- Scanning runs in your browser (axe-core). Page content is not sent to AcceGuru or any third party.
- Results stay in your database (post meta, options, transients). No custom database tables are created.
- AI API keys are stored encrypted in the options table and are sent only to the AI provider you chose, only when generating alt text.
Permissions¶
Every form and request is protected against cross-site request forgery (a nonce), and each action checks a WordPress capability:
| Action | Required capability |
|---|---|
| Dashboard, full-site scan, settings, fixers, statement, and API-key test | Manage Options |
| Front-end live scan | Edit Posts |
| Generate AI alt text for an individual attachment | Upload Files and permission to edit that attachment |
| Pro CSV / JSON export | Edit Posts |
| Pro dismiss action | Edit Posts and a role enabled for dismiss access; Administrators are always allowed |
Role-based dismiss permissions PRO
On the AcceGuru -> Settings -> Rules tab, Pro lets you choose which user roles may dismiss issues. Administrators always can; by default Editors can too. Tick or untick roles to widen or narrow who is allowed.