Ticket #17924: 17924.08.patch

src/wp-admin/network/site-users.php

@@ -145 +145 @@
                         if ( isset( $_REQUEST['users'] ) ) {
                                 $userids = $_REQUEST['users'];
                                 $update = 'promote';
+                                $blog_roles = array_keys( $editable_roles );
                                 foreach ( $userids as $user_id ) {
                                         $user_id = (int) $user_id;
 
@@ -158 +159 @@
                                         }
 
                                         $user = get_userdata( $user_id );
-                                        $user->set_role( $_REQUEST['new_role'] );
+
+                                        // Remove any blog roles for this user
+                                        foreach ( $blog_roles as $blog_role ) {
+                                                if ( $user->has_cap( $blog_role ) ) {
+                                                        $user->remove_role( $blog_role );
+                                                }
+                                        }
+
+                                        // Add  back the role being bulk-set
+                                        $user->add_role( $_REQUEST['new_role'] );
                                 }
                         } else {
                                 $update = 'err_promote';

src/wp-admin/users.php

@@ -115 +115 @@
 
         $userids = $_REQUEST['users'];
         $update = 'promote';
+        $blog_roles = array_keys( $editable_roles );
         foreach ( $userids as $id ) {
                 $id = (int) $id;
 
@@ -137 +138 @@
                 }
 
                 $user = get_userdata( $id );
-                $user->set_role( $role );
+
+                // Remove any blog roles for this user
+                foreach ( $blog_roles as $blog_role ) {
+                        if ( $user->has_cap( $blog_role ) ) {
+                                $user->remove_role( $blog_role );
+                        }
+                }
+
+                // Add  back the role being bulk-set
+                $user->add_role( $_REQUEST['new_role'] );
         }
 
         wp_redirect(add_query_arg('update', $update, $redirect));