[wp-trac] [WordPress Trac] #14986: Make WordPress roles/capabilities more secure (edit_users related)

WordPress Trac noreply at wordpress.org
Tue Jul 8 14:28:53 UTC 2014


#14986: Make WordPress roles/capabilities more secure (edit_users related)
-----------------------------+-----------------------------
 Reporter:  Otto42           |       Owner:
     Type:  enhancement      |      Status:  new
 Priority:  normal           |   Milestone:  Future Release
Component:  Role/Capability  |     Version:
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+-----------------------------

Comment (by boxcarpress):

 Is it still the case that users with 'edit_users' capability can elevate
 themselves? Does WP rely on 'promote_users' except for multisite?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/14986#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list