[wp-trac] [WordPress Trac] #44176: Missing Privacy Capabilities

[WordPress Trac]

#44176: Missing Privacy Capabilities
--------------------------+-----------------------------
 Reporter:  desrosj       |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Privacy       |    Version:  4.9.6
 Severity:  normal        |   Keywords:  needs-patch
  Focuses:                |
--------------------------+-----------------------------
 Three new capabilities were added in WordPress 4.9.6 to allow granular
 control over the new privacy features:

 - `erase_others_personal_data`
 - `export_others_personal_data `
 - `manage_privacy_options `

 If a site activates a role management plugin (such as
 [https://wordpress.org/plugins/members/ Members]), the capability is not
 listed under the Administrator role (which receives these capabilities by
 default), and is not available to be assigned to other roles. Adding this
 role as a custom capability does nothing because the capabilities are
 mapped to `manage_options` and `manage_network`.

 A site could create a custom role specifically for someone to manage
 privacy requests that should not have access to other `manage_options`
 related functionality.

 Related: #44079, ticket:44055#comment:5.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44176>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform