vhad/wordpress-develop
1
0
Fork 0
mirror of https://github.com/gosticks/wordpress-develop.git synced 2026-06-30 23:30:05 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add more fine grained user management caps. Part 1. #2775

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@3846 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren
2006-06-05 16:52:21 +00:00
parent 27bc07a27f
commit f7e56ee9b3
7 changed files with 29 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
wp-admin/users.php
View File

@@ -23,6 +23,8 @@ case 'promote':
$userids = $_POST['users'];
$update = 'promote';
foreach($userids as $id) {
if ( ! current_user_can('edit_user', $id) )
die(__('You can’t edit that user.'));
// The new role of the current user must also have edit_users caps
if($id == $current_user->id && !$wp_roles->role_objects[$_POST['new_role']]->has_cap('edit_users')) {
$update = 'err_admin_role';
@@ -45,13 +47,16 @@ case 'dodelete':
header('Location: users.php');
}
if ( !current_user_can('edit_users') )
if ( !current_user_can('delete_users') )
die(__('You can’t delete users.'));
$userids = $_POST['users'];
$update = 'del';
foreach ($userids as $id) {
if ( ! current_user_can('delete_user', $id) )
die(__('You can’t delete that user.'));
if($id == $current_user->id) {
$update = 'err_admin_del';
continue;
@@ -78,7 +83,7 @@ case 'delete':
header('Location: users.php');
}
if ( !current_user_can('edit_users') )
if ( !current_user_can('delete_users') )
$error = new WP_Error('edit_users', __('You can’t delete users.'));
$userids = $_POST['users'];
@@ -134,6 +139,9 @@ break;
case 'adduser':
check_admin_referer('add-user');
if ( ! current_user_can('create_users') )
die(__('You can’t create users.'));
$user_id = add_user();
if ( is_wp_error( $user_id ) )
$errors = $user_id;