Mikesoft TeamVault

English · Italiano · Français · Español · Deutsch

Private document workspace for WordPress teams, agencies, and operations that need controlled file sharing outside the Media Library.

Current plugin version: 3.2.2.

2,000+ total downloads on WordPress.org, with dozens of new downloads every day.

If TeamVault is useful to you, consider sponsoring the project on GitHub — it is developed and maintained for free, and sponsorships help keep it going.

Overview

Mikesoft TeamVault adds a private document workspace inside the WordPress admin. It is designed for teams that need to organize, preview, export, and share sensitive files without exposing them through normal Media Library URLs.

Files are stored in protected storage and delivered through authenticated WordPress handlers instead of public media URLs.

Per-folder permissions	Search across the vault	Storage quotas
Groups	Activity log	Settings

Typical use cases include:

• internal company documents
• agency-to-client document delivery from WordPress admin
• partner or vendor file exchanges
• back-office archives that should stay out of the public Media Library

Core capabilities include:

• private storage outside the normal Media Library workflow
• shared access for authorized internal users
• folder creation, rename, move, and delete operations
• drag-and-drop uploads with file validation
• inline preview for supported file types, including PDFs
• ZIP export for folders or the full document library
• activity logging for operational traceability
• maintenance tools for orphan cleanup and storage reindex

Governance capabilities (all free, since 2.6):

• TeamVault groups to organize users into departments or teams, independent from WordPress roles
• per-folder permissions with granular actions (view, upload, download, delete, manage) for users and groups, with inheritance and explicit child overrides
• preview-only access that allows viewing without download or ZIP export
• per-user and per-group storage quotas enforced before upload
• access reports (who viewed or downloaded what) with filters and a CSV export of the activity log
• email notifications for upload, download, delete, and access-denied events

Latest Release

Version 3.2.2 refreshes the file-type icons throughout the file manager. PDF, Word, Excel, PowerPoint, CSV, text, archive, audio, video, and image files now show clear, recognizable colored badges with the format label — in the file grid, the list view, and the details preview — replacing the previous monochrome glyphs.

Version 3.2.0 improves the file manager and streamlines the settings. Folders that carry their own permission rules now show a lock badge so restricted areas are recognizable at a glance, the empty-folder view offers a clear drop zone with quick upload / new-folder actions, and the interface received accessibility improvements (higher-contrast text, labeled icon buttons, screen-reader announcements). The white-label branding option was removed to keep TeamVault focused on secure document management; the plugin now always uses its standard identity and any previously saved brand settings are cleaned up on update.

Version 3.1.1 makes the interface language follow the WordPress language automatically. The new default "Automatic" mode matches the WordPress site/admin locale — Italian, French, Spanish, or German when supported, English otherwise — so the plugin speaks the same language as the rest of the dashboard with no configuration. A specific language can still be forced in the settings.

Version 3.1.0 adds a fully translated plugin admin interface: the interface language selector now offers Italian, French, Spanish, and German in addition to English, covering every screen, label, warning, and error message. This README is also available in those languages via the links at the top.

Version 3.0.0 is a security and reliability milestone. Search results are now filtered through the per-folder permission engine, so restricted users can no longer discover file names or metadata from folders they cannot view. The generated storage .htaccess denies direct access on Apache 2.4 in addition to Apache 2.2 and IIS, and storage quotas are enforced with a database lock so concurrent uploads cannot jointly exceed a limit. Downloads and inline previews gain HTTP Range support (Accept-Ranges / 206 Partial Content) for resumable transfers and range-seeking PDF viewers on large files. The folder permissions dialog now warns when rules exist but the root has none, the admin menu icon matches native WordPress styling, and the admin JavaScript was split into focused modules with no change in behavior.

Version 2.6 introduced the free document governance suite: TeamVault groups, per-folder permissions with inheritance and granular actions (view, upload, download, delete, manage), preview-only access, per-user and per-group storage quotas, access reports with CSV export, and email notifications. Existing installs are unaffected because folders with no rules keep the prior behavior.

Why teams adopt TeamVault:

• it creates a dedicated private document area instead of overloading the Media Library
• it adds capability-based access control with an optional whitelist layer, plus per-folder permissions and groups for finer governance
• it keeps export, maintenance, and recovery workflows focused on operational files

Requirements

• WordPress 6.0 or later
• PHP 8.0 or later
• Writable storage path for private documents
• ZipArchive available on the server for export features

Installation

Recommended

Install the plugin from the WordPress.org Plugin Directory so the site receives standard update notifications.

1. In WordPress admin, go to Plugins > Add New.
2. Search for Mikesoft TeamVault.
3. Click Install Now and activate the plugin.
4. Open TeamVault > Settings to review access, storage, and file rules.

Manual

1. Download the release package from WordPress.org.
2. Upload it to wp-content/plugins/mikesoft-teamvault/.
3. Activate the plugin from the Plugins screen.

Access Model

• File workspace access uses the manage_private_documents capability.
• New activations grant that capability to Administrators only.
• The manage_private_documents capability grants full TeamVault workspace access, including upload, rename, move, download, export, and delete actions.
• Optional whitelist mode adds a second authorization layer for selected users.
• Per-folder permissions (since 2.6) add fine-grained control on top of the capability: when a folder has explicit rules, access is limited to the granted users/groups and actions, with inheritance from parent folders; folders with no rules keep the capability-based behavior. Administrators always retain full access.
• Settings, groups, quotas, notifications, reports, activity logs, whitelist management, maintenance tools, and uninstall data controls require manage_options.

When whitelist mode is enabled, keep the current administrator account in the allowed users list before saving settings. On sites upgraded from older releases, review existing role capabilities and whitelist settings if Editors previously had TeamVault access.

Storage

• Default storage path: wp-content/uploads/private-documents/
• The plugin can use a custom writable path configured in settings.
• Storage is protected with server-level deny files where supported.
• Apache/LiteSpeed can enforce the generated .htaccess; IIS can enforce web.config; Nginx requires an equivalent server rule that denies direct requests to /wp-content/uploads/private-documents/.
• For high-sensitivity deployments, prefer a custom storage path outside the public webroot.
• The sidebar storage widget shows only the space used by TeamVault files, to avoid exposing misleading hosting quota values on shared environments.

If a site is migrated without copying the private storage folder, TeamVault records may remain in the database while the original binaries are missing. The settings screen includes cleanup and reindex tools for those scenarios.

Support

• End-user support: WordPress.org support forum
• Email: teamvault@mikesoft.it
• Website: mikesoft.it
• Security reports: see SECURITY.md
• Support continued open-source maintenance: GitHub Sponsors

Development Quick Check

Install development dependencies with Composer, then run the standard validation commands:

composer install
composer lint
composer test
composer ci

composer lint checks all repository PHP files outside generated dependencies. composer test runs the lightweight PHPUnit suite with the repository bootstrap. GitHub Actions also runs WordPress Plugin Check against a clean runtime build of the plugin.

Repository Guide

This repository is the public source mirror for the plugin.

• Product and installation information for WordPress.org users lives in readme.txt.
• Full release history lives in changelog.txt.
• Repository policies live in CONTRIBUTING.md, CODE_OF_CONDUCT.md, and SECURITY.md.
• Maintainer and developer notes live in docs/.

Branding Assets

• .wordpress-org/assets/icon-256x256.png is the primary full-color icon for the WordPress.org listing.
• .wordpress-org/assets/icon.svg is the scalable companion asset for the WordPress.org listing.
• .wordpress-org/assets/screenshot-1.jpg … screenshot-7.jpg are the WordPress.org listing screenshots, also used in this README.
• assets/logo-teamvault.svg is the in-plugin admin logo used inside the TeamVault interface.

These assets serve different surfaces and should stay aligned to the same brand without forcing the runtime plugin UI to match WordPress.org packaging constraints.

Documentation Map

• docs/developer/hooks.md - developer hooks and filters
• docs/maintainer/local-development.md - local development workflow
• docs/maintainer/release.md - WordPress.org release process

License

GPL v2 or later. See LICENSE.