[theme-reviewers] Suggested recommendation: edit_themes, edit_theme_options, switch_themes, manage_options

[Chip Bennett]

Thanks for this, Demetris!

We've not (yet) addressed much at all the issue of best-practice for
handling Theme Options. I know we'll get there as we continue to move
forward (and as several of us - most of all, me - traverse the learning
curve regarding Theme Options, security, and best practices.

This information will certainly be an invaluable part of that learning
curve, and we welcome anything else you might be able to contribute along
these lines.

Chip

On Wed, Nov 17, 2010 at 1:46 PM, Demetris Kikizas <kikizas at gmail.com> wrote:

> Hello, dearly beloved theme reviewers!
>
> As more and more themes come now with options/settings, I see quite a
> few of them using the edit_themes capability for controlling access to
> their options screens, which is wrong:
>
> edit_themes controls access to the code editor; it has nothing to do
> with theme options.
>
> Access to theme options is controlled with edit_theme_options, which
> was introduced in WordPress 3.0. For earlier versions, one can use
> switch_themes or manage_options.  (I’m not certain which one is best;
> someone who knows WP better could help us here.)
>
> So, if it is not difficult to check for that, I think it would be good
> to offer a recommendation for the appropriate capability.  It would
> benefit both theme users and theme creators.
>
> Cheers,
>
> Demetris
> http://op111.net/
> _______________________________________________
> theme-reviewers mailing list
> theme-reviewers at lists.wordpress.org
> http://lists.wordpress.org/mailman/listinfo/theme-reviewers
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wordpress.org/pipermail/theme-reviewers/attachments/20101117/6f6197cd/attachment.htm>