WordPress.org

Make WordPress Core

Opened 7 years ago

Closed 7 years ago

#3074 closed defect (bug) (fixed)

Blogroll "shortcut" in Dashboard leads to broken link when logged in as a less capable user

Reported by: JeremyVisser Owned by: markjaquith
Priority: normal Milestone: 2.1
Component: Administration Version: 2.0.4
Severity: normal Keywords: has-patch
Cc:

Description

I've just noticed that when I create a user with the role of Author or Contributor, it does not have the capability to manage the Blogroll but still the Dashboard has a shortcut to the Links page and creates an ugly error message when clicked.

To reproduce this, create a user called Bob. Make him a Contributor. Log him on. Click the "Add a link to your blogroll" link on the Dashboard. Read the message ;).

P.S.: This occurs in 2.0.4 and there appears to be no milestone selectable for 2.0.5. Does that mean you're not planning on any more releases in the 2.0 branch?

Attachments (1)

links_to_get_started_CAPS.diff​ (1.5 KB) - added by markjaquith 7 years ago.
patch for /trunk/

Download all attachments as: .zip

Change History (4)

comment:1 ryan — 7 years ago

We need a current_user_can('manage_links') check around that.

markjaquith — 7 years ago

patch for /trunk/

comment:2 markjaquith — 7 years ago

  • Keywords has-patch added
  • Owner changed from anonymous to markjaquith
  • Status changed from new to assigned

Patch adds the check.

I also added checks for the post writing and theme changing links.

comment:3 ryan — 7 years ago

  • Resolution set to fixed
  • Status changed from assigned to closed

(In [4130]) Add cap checks around getting started links. Props Mark J. fixes #3074

Note: See TracTickets for help on using tickets.