[wp-trac] [WordPress Trac] #26409: Non-Editors can create (non-hierarchical) terms even though they can't manage_terms
WordPress Trac
noreply at wordpress.org
Thu Jan 9 06:13:55 UTC 2014
#26409: Non-Editors can create (non-hierarchical) terms even though they can't
manage_terms
--------------------------+------------------
Reporter: westonruter | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.9
Component: Taxonomy | Version: 3.0
Severity: normal | Resolution:
Keywords: has-patch |
--------------------------+------------------
Comment (by nacin):
I am pretty sure that this is intentional. Or rather, capability handling
for custom taxonomies is super weird and possibly never worked right. The
ability for non-editors to create tags has always been proper behavior.
assign_terms currently holds the keys for creating tags. As to how it
ended up this way: Hierarchical taxonomies are based on ID, non-
hierarchical on slug. You need to be an editor to add a new category to
get said ID. But any author can just type out a new tag. At some point,
we'll need to improve our caps handling to make this more robust and to
properly handle the different scenarios. there is likely already a ticket
or two.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/26409#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list