Privacy: Limit export and erasure to super admins on Multisite.

Multisite networks have a variety of use cases, and in many of them single-site administrators are not trusted to take actions that affect the whole network, require making decisions about legal compliance, etc. By default, those actions should require super admin capabilities. Plugins can be used to override that behavior if a particular site's use case calls for it.

Props allendav, jeremyfelt, iandunn.
Fixes #43919.


git-svn-id: https://develop.svn.wordpress.org/trunk@43085 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ian Dunn
2018-05-02 01:07:00 +00:00
parent 3f92792cd2
commit 1a4e28818f
4 changed files with 23 additions and 8 deletions

View File

@@ -237,6 +237,8 @@ class Tests_User_Capabilities extends WP_UnitTestCase {
'update_languages' => array( 'administrator' ),
'deactivate_plugins' => array( 'administrator' ),
'upgrade_php' => array( 'administrator' ),
'export_others_personal_data' => array( 'administrator' ),
'erase_others_personal_data' => array( 'administrator' ),
'edit_categories' => array( 'administrator', 'editor' ),
'delete_categories' => array( 'administrator', 'editor' ),
@@ -269,6 +271,8 @@ class Tests_User_Capabilities extends WP_UnitTestCase {
'update_languages' => array(),
'deactivate_plugins' => array(),
'upgrade_php' => array(),
'export_others_personal_data' => array( '' ),
'erase_others_personal_data' => array( '' ),
'customize' => array( 'administrator' ),
'delete_site' => array( 'administrator' ),