[wp-trac] [WordPress Trac] #52246: A lower user role user (editor) can assign the post author to a higher user role user (administrator)

WordPress Trac noreply at wordpress.org
Thu Jan 7 17:31:14 UTC 2021


#52246: A lower user role user (editor) can assign the post author to a higher user
role user (administrator)
--------------------------+-----------------------------
 Reporter:  ninetyninew   |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Unsure if I have maybe messed around with my user role permissions at some
 stage but I've just noticed when logged in as an editor I can assign a new
 post to an administrator. If this isn't me previously changing user role
 caps then is this functionality correct?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52246>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list