Ticket #25219: 25219.diff

src/wp-admin/includes/update.php

@@ -168 +168 @@
 }
 
 function wp_plugin_update_rows() {
-        if ( !current_user_can('update_plugins' ) )
+        if ( !current_user_can('view_plugin_updates' ) )
                 return;
 
         $plugins = get_site_transient( 'update_plugins' );

src/wp-includes/capabilities.php

@@ -1217 +1217 @@
                 else
                         $caps[] = $cap;
                 break;
+        case 'view_plugin_updates':
+        case 'view_theme_updates':
+        case 'view_core_updates':
+                if ( is_multisite() && ! is_super_admin( $user_id ) )
+                        $caps[] = 'do_not_allow';
+                else
+                        $caps[] = 'manage_options';
+                break;
         case 'activate_plugins':
                 $caps[] = $cap;
                 if ( is_multisite() ) {

src/wp-includes/update.php

@@ -333 +333 @@
 function wp_get_update_data() {
         $counts = array( 'plugins' => 0, 'themes' => 0, 'wordpress' => 0 );
 
-        if ( current_user_can( 'update_plugins' ) ) {
+        if ( current_user_can( 'view_plugin_updates' ) ) {
                 $update_plugins = get_site_transient( 'update_plugins' );
                 if ( ! empty( $update_plugins->response ) )
                         $counts['plugins'] = count( $update_plugins->response );