Hi @infodevpro,
1) Does your plugin ADD these roles to users when the roles are in use?
No, FDP just adds those two roles only when you activate FDP, nothing else.
It uses the WP core functions to add those roles when the function hooked to “register_activation_hook” fires.
Everything is totally standard, the WP core functions are used, and the best practices suggested by WordPress are followed.
3) Of course, there would be a way, there is always a way, but it would not be the best way.
It’s already everything managed with capabilities. The role is added to give the right capabilities to those two roles and give the possibility to the administrators to assign the role if needed. If the administrator doesn’t assign those roles, no user will have those roles.
The administrator may need to assign one of those roles if they want to give access to the backend, but only to the FDP backend pages.
The FDP viewer can only see the FDP backend pages, and the FDP Manager can also manage the FDP settings. Nothing else.
Those two roles are never assigned if not manually by the administrator.
I suggest you write the author of the plugin that doesn’t follow the best practices to solve any conflict you may have.
I hope it’s clear.
Have a great day!
Jose