[wp-trac] [WordPress Trac] #38961: REST API: User with `promote_users` cap can't add existing users to a site
WordPress Trac
noreply at wordpress.org
Sun Nov 27 12:44:47 UTC 2016
#38961: REST API: User with `promote_users` cap can't add existing users to a site
--------------------------+-----------------------------
Reporter: ocean90 | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: REST API | Version: trunk
Severity: normal | Keywords: has-unit-tests
Focuses: multisite |
--------------------------+-----------------------------
Adding an existing user to a site should be done by performing a PUT
request to the user resource on the other site, see
[comment:ticket:38526:7]. This works if the current user can edit users.
But core also allows users with the `promote_users` capability to add
existing users:
* https://core.trac.wordpress.org/browser/trunk/src/wp-
admin/menu.php?rev=38827&marks=225,235#L219
* https://core.trac.wordpress.org/browser/trunk/src/wp-admin/user-
new.php?rev=39006&marks=176,279-282#L278
--
Ticket URL: <https://core.trac.wordpress.org/ticket/38961>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list