[wp-trac] Re: [WordPress Trac] #2775: Ability for all users to add users of lesser cabable roles

WordPress Trac wp-trac at lists.automattic.com
Sat Jun 10 15:59:10 GMT 2006


#2775: Ability for all users to add users of lesser cabable roles
----------------------------+-----------------------------------------------
       Id:  2775            |      Status:  new                     
Component:  Administration  |    Modified:  Sat Jun 10 15:59:10 2006
 Severity:  enhancement     |   Milestone:                          
 Priority:  normal          |     Version:  2.1                     
    Owner:  doit-cu         |    Reporter:  doit-cu                 
----------------------------+-----------------------------------------------
Comment (by ringmaster):

 Right.  What I'm suggesting is that you could use the user_has_cap
 capability to restrict a user's ability to edit that single plugin via
 WordPress.  If they attempted to load the plugin editor with that file,
 use user_has_cap to temporarily deny that cap so that the page won't load.

 Why?  Because then you don't have to set the mode on the file, because it
 is inconvenient (since you can't necessarily do it from the admin console)
 and because many users don't understand the how or why of it.  It makes it
 easier for the user, that's all.  Like I said, just a crazy suggestion.

 Perhaps what is needed instead is a way to install plugin-like features
 that are not available for deactivation or editing via the admin, but
 require server access to modify?  This could be used as a more secure way
 to modify the user privilege system in totality.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/2775>
WordPress Trac <http://wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list