[wp-trac] [WordPress Trac] #25162: Users with no role can see inaccessible dashboard links

WordPress Trac noreply at wordpress.org
Wed Aug 28 10:20:36 UTC 2013


#25162: Users with no role can see inaccessible dashboard links
--------------------------+-----------------------------
 Reporter:  johnbillion   |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Users         |    Version:  3.0
 Severity:  minor         |   Keywords:  needs-patch
--------------------------+-----------------------------
 This only affects single site installs. Multisite works as expected thanks
 to the Global Dashboard.

 Steps to reproduce:

  1. Edit a user on a single site install and change their role to "No role
 for this site"
  2. Log in as that user
  3. Note that you're immediately presented with a "You do not have
 sufficient permissions..." message due to the attempt to access the admin
 dashboard
  4. Visit the site home page and note that there are links to the admin
 dashboard and user profile screen in the admin toolbar that also result in
 a "You do not have sufficient permissions..." message

 When a user with no role logs in we should:

  1. Redirect to the home page rather than the admin dashboard
  2. Not show the inaccessible links in the admin toolbar

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25162>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list