Inline file upload should be controlled by configuration

[doit-cu]

At a minimum, an administrator should be able to turn this on/off in the options section. I see there's already a current_user_can statement in inline-uploading.php, so it might be nice to handle it via some capabilities. Finally, it might be nice to control which MIME types can be uploaded via some interface, rather than hard coding them.

Like so many other customizable features, this one will be used by such a tiny minority that it belongs in the realm of plugins.

Except perhaps a single checkbox for the administrator role: "Display the Upload interface on Write screens."

I'll definitely go with the cap, I'm less sold on the config option: I'll sit on the fence for that one. Drafting up a patch to add the cap.

There already was a cap, upload_files, which I've used. Guess it was hanging around from the legacy upload code.

There's a slight bug in that approach- logged in users can still view inline-uploading.php directly by passing in action=whatever on the query string.

Forgive me, I'm new to this. inline-up.diff is incorrect. inline-uploading.diff should be correct.

Corrected inline-up.diff

Oops, you're right. Apply both patches.

davidhouse I'm confused.

(In [3456]) Check upload_files cap for inline uploader. Props David House and doit-cu. fixes #2302

Milestone 2.0.1 deleted