I would like allow a WordPress user only to have access to CiviCRM. I realise that it has to go through the WordPress interface, but we want the CiviCRM users to only be able to administer CiviCRM, and not the WordPress site. Some will need full rights to CiviCRM.
I have found some info regarding this, and this questions helped me a lot: How to display CiviCRM menu for non-admin role using WordPress?
Anyone can register is not selected in WP admin, and I have changed that a subscriber can access basically everything in in WordPress Access Control.
I am just concerned about security, and was wondering if perhaps there is a better way of doing this?