vhad/wordpress-develop
1
0
Fork 0
mirror of https://github.com/gosticks/wordpress-develop.git synced 2026-06-28 22:30:04 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Capabilities: Prevent users having the do_not_allow capability.

Browse Source 
Meta capabilities use the capability `do_not_allow` to indicate a user should be blocked from performing a particular action. This ensures users can not have the capability as it would cause unexpected behaviour.

Props johnbillion.
Fixes #41059.



git-svn-id: https://develop.svn.wordpress.org/trunk@40993 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Peter Wilson
2017-07-02 05:15:42 +00:00
parent bf850da3ec
commit 3a4ffa09ab
2 changed files with 54 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/wp-includes/class-wp-user.php
View File

@@ -748,6 +748,9 @@ class WP_User {
// Everyone is allowed to exist.
$capabilities['exist'] = true;
// Nobody is allowed to do things they are not allowed to do.
unset( $capabilities['do_not_allow'] );
// Must have ALL requested caps.
foreach ( (array) $caps as $cap ) {
if ( empty( $capabilities[ $cap ] ) )