[wp-trac] [WordPress Trac] #57882: User that has capability to create user can make only administrator.

WordPress Trac noreply at wordpress.org
Tue Mar 7 23:58:11 UTC 2023


#57882: User that has capability to create user can make only administrator.
-------------------------------------------+------------------------------
 Reporter:  dangerd512                     |       Owner:  (none)
     Type:  defect (bug)                   |      Status:  new
 Priority:  normal                         |   Milestone:  Awaiting Review
Component:  Security                       |     Version:  6.1.1
 Severity:  normal                         |  Resolution:
 Keywords:  needs-patch reporter-feedback  |     Focuses:
-------------------------------------------+------------------------------
Changes (by costdev):

 * keywords:  needs-patch => needs-patch reporter-feedback


Comment:

 Hi @dangerd512, thanks for opening this ticket!

 When only these capabilities are given, the Manager role will create users
 using the New User Default Role set in `Settings > General`. This might be
 worth checking on your site.

 With the `promote_users` capability, the Manager will not be able to
 create a user with the Administrator role, but will be able to select
 other roles such as Subscriber, Contributor, Author, Editor, and in this
 case, Manager.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57882#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list