[wp-trac] [WordPress Trac] #16501: 'Add Existing' button should be dependent on is_multisite

WordPress Trac wp-trac at lists.automattic.com
Wed Feb 9 07:55:27 UTC 2011


#16501: 'Add Existing' button should be dependent on is_multisite
--------------------------+------------------
 Reporter:  nacin         |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  low           |   Milestone:  3.1
Component:  General       |     Version:
 Severity:  normal        |  Resolution:
 Keywords:                |
--------------------------+------------------

Comment (by linuxologos):

 promote_users is somehow problematic (on '''single-site installs''' at
 least).

 Let's say we'd like to give an editor some extra capabilities concerning
 users.

 * '''list_users''' does just what it says. However there is something that
 could be enhanced: "Bulk Actions" and "Change role to..." dropdowns are
 visible to him, though he cannot use them.

 * '''edit_users''' allows him to edit user accounts with an inferior role
 (author/contributor/subscriber).

 * '''create_users''' does not work at all without promote_users (returns
 "You do not have sufficient permissions to access this page.")

 * But giving '''promote_users''' grants the editor the capability to
 change the role of ANY account, admins included. He cannot edit the
 account directly, but the "Change role to..." dropdown is now fully
 functional and does not respect superior roles.

 create_users currently needs promote_users to work, but promote_users has
 the above mentioned problem. These caps should be clarified and that issue
 taken into consideration.

 I have not tested how add/delete/remove_users work.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/16501#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list