[wp-trac] [WordPress Trac] #38961: REST API: User with `promote_users` cap can't add existing users to a site

WordPress Trac noreply at wordpress.org
Sun Nov 27 12:44:47 UTC 2016


#38961: REST API: User with `promote_users` cap can't add existing users to a site
--------------------------+-----------------------------
 Reporter:  ocean90       |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  REST API      |    Version:  trunk
 Severity:  normal        |   Keywords:  has-unit-tests
  Focuses:  multisite     |
--------------------------+-----------------------------
 Adding an existing user to a site should be done by performing a PUT
 request to the user resource on the other site, see
 [comment:ticket:38526:7]. This works if the current user can edit users.

 But core also allows users with the `promote_users` capability to add
 existing users:
 * https://core.trac.wordpress.org/browser/trunk/src/wp-
 admin/menu.php?rev=38827&marks=225,235#L219
 * https://core.trac.wordpress.org/browser/trunk/src/wp-admin/user-
 new.php?rev=39006&marks=176,279-282#L278

--
Ticket URL: <https://core.trac.wordpress.org/ticket/38961>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list