[wp-trac] [WordPress Trac] #26409: Non-Editors can create (non-hierarchical) terms even though they can't manage_terms

[WordPress Trac]

#26409: Non-Editors can create (non-hierarchical) terms even though they can't
manage_terms
--------------------------+------------------
 Reporter:  westonruter   |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.9
Component:  Taxonomy      |     Version:  3.0
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |
--------------------------+------------------

Comment (by nacin):

 I am pretty sure that this is intentional. Or rather, capability handling
 for custom taxonomies is super weird and possibly never worked right. The
 ability for non-editors to create tags has always been proper behavior.

 assign_terms currently holds the keys for creating tags. As to how it
 ended up this way: Hierarchical taxonomies are based on ID, non-
 hierarchical on slug. You need to be an editor to add a new category to
 get said ID. But any author can just type out a new tag. At some point,
 we'll need to improve our caps handling to make this more robust and to
 properly handle the different scenarios. there is likely already a ticket
 or two.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/26409#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress blogging software