id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
14673	Using edit_theme_options capability only for Theme options not possible	davecpage		"An additional capability edit_theme_options was added back in April as per [http://wpdevel.wordpress.com/2010/04/16/i-notice-a-lot-of-themes-passing-the-e/ dev chat] as many themes were using the capability edit_themes when registering their options pages. Unfortunately although this capability works fine with menus and the custom header & footer code you can't use it for generic theme options pages. 

If a theme registers it's options using edit_theme_options the options page will display correctly, but the page won't save unless the user also has the manage_options capability, which is fine for administrator level users as they have manage_options too, but not other level users who could have been given just edit_theme_options.

I looked into changing line 30 of wp-admin/options.php from:

{{{
if ( !current_user_can('manage_options') )
}}}

to:

{{{
if ( !current_user_can('manage_options') && !current_user_can('edit_theme_options') )
}}}

which seems to work, but I'm not sure if that opens up any security issues."	defect (bug)	closed	normal		Administration	3.0.1	normal	duplicate