Ticket #19824: 19824.patch

wp-admin/includes/class-wp-upgrader.php

@@ -1270 +1270 @@
                         'plugins_page' => '<a href="' . self_admin_url('plugins.php') . '" title="' . esc_attr__('Go to plugins page') . '" target="_parent">' . __('Return to Plugins page') . '</a>',
                         'updates_page' => '<a href="' . self_admin_url('update-core.php') . '" title="' . esc_attr__('Go to WordPress Updates page') . '" target="_parent">' . __('Return to WordPress Updates') . '</a>'
                 );
+                if ( ! current_user_can( 'activate_plugins' ) )
+                        unset( $update_actions['plugins_page'] );
 
                 $update_actions = apply_filters('update_bulk_plugins_complete_actions', $update_actions, $this->plugin_info);
                 if ( ! empty($update_actions) )
@@ -1302 +1304 @@
                         'themes_page' => '<a href="' . self_admin_url('themes.php') . '" title="' . esc_attr__('Go to themes page') . '" target="_parent">' . __('Return to Themes page') . '</a>',
                         'updates_page' => '<a href="' . self_admin_url('update-core.php') . '" title="' . esc_attr__('Go to WordPress Updates page') . '" target="_parent">' . __('Return to WordPress Updates') . '</a>'
                 );
+                if ( ! current_user_can( 'switch_themes' ) && ! current_user_can( 'edit_theme_options' ) )
+                        unset( $update_actions['themes_page'] );
 
                 $update_actions = apply_filters('update_bulk_theme_complete_actions', $update_actions, $this->theme_info);
                 if ( ! empty($update_actions) )