[wp-trac] [WordPress Trac] #57882: User that has capability to create user can make only administrator.

WordPress Trac noreply at wordpress.org
Tue Mar 7 20:58:47 UTC 2023


#57882: User that has capability to create user can make only administrator.
--------------------------+-----------------------------
 Reporter:  dangerd512    |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Security      |    Version:  6.1.1
 Severity:  normal        |   Keywords:  needs-patch
  Focuses:                |
--------------------------+-----------------------------
 I have user role "Manager" that has capabilities:
  add users
  create users
  delete users
  edit users
  list users
  remove users

 That users should be able to create users with different roles except
 administrators (they doesn't have "promote users" capability)

 When manager opens Add new user page he doesn't see dropdown with roles
 and created user becomes administrator.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57882>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list