[wp-trac] [WordPress Trac] #21425: the 'edit_users' capability also allows 'promote_users'

[WordPress Trac]

#21425: the 'edit_users' capability also allows 'promote_users'
-------------------------------------+------------------------------
 Reporter:  ew_holmes                |       Owner:
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Role/Capability          |     Version:  3.4.1
 Severity:  major                    |  Resolution:
 Keywords:  needs-patch 2nd-opinion  |
-------------------------------------+------------------------------

Comment (by ew_holmes):

 Would an additional capability of say, 'edit_basic_users' be a solution?
 Say it only allows the alteration of the Names, Contact Info, and bio of a
 user? and remove the ability to change Role, password, and personal
 options?

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/21425#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software