[wp-trac] [WordPress Trac] #16293: In multisite installs, users with id 1 or 2 can't be deleted

WordPress Trac noreply at wordpress.org
Sat Dec 14 08:28:43 UTC 2013


#16293: In multisite installs, users with id 1 or 2 can't be deleted
------------------------------------------------+-----------------------
 Reporter:  PeteMall                            |       Owner:
     Type:  defect (bug)                        |      Status:  reopened
 Priority:  normal                              |   Milestone:  3.9
Component:  Multisite                           |     Version:  3.1
 Severity:  normal                              |  Resolution:
 Keywords:  dev-feedback 3.7-early needs-patch  |
------------------------------------------------+-----------------------

Comment (by jeremyfelt):

 Additional info:

 * If the `admin_email` has not been changed, you are unable to revoke
 super admin privileges on a user. This could remove the requirement to
 check `admin_user_id` or `admin_email` as that can be assumed as already
 changed.
 * `admin_email` can be changed to another user while leaving `admin_id` as
 is. `admin_id` does not prevent a super admin from being demoted.
 * If we remove the check for `$id != 0`, it is unlikely though possible
 that you end up with [http://cl.ly/image/3U3P13400e3g this screen], so we
 should leave that check there.

 [attachment:16293.4.diff] removes only the `$id != 1` check.

 I *think* the only thing up in the air with this patch is the behavior of
 the `manage_network_users` capability.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/16293#comment:16>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list