Ticket #36961: 36961.2.diff

src/wp-includes/class-wp-user.php

@@ -88 +88 @@
         public $allcaps = array();
 
         /**
+         * The site ID the roles of this user are initialized for.
+         *
+         * @since 4.8.0
+         * @access private
+         * @var int
+         */
+        private $blog_id = 0;
+
+        /**
          * The filter context applied to user data fields.
          *
          * @since 2.9.0
@@ -451 +460 @@
         protected function _init_caps( $cap_key = '' ) {
                 global $wpdb;
 
-                if ( empty($cap_key) )
-                        $this->cap_key = $wpdb->get_blog_prefix() . 'capabilities';
-                else
+                // Backward-compatibility with calling this method directly.
+                if ( empty( $this->blog_id ) ) {
+                        if ( empty( $cap_key ) ) {
+                                $this->blog_id = get_current_blog_id();
+                        } else {
+                                $base_prefix = $this->db->get_blog_prefix( 1 );
+                                if ( $base_prefix . 'capabilities' === $cap_key ) {
+                                        $this->blog_id = 1;
+                                } else {
+                                        $this->blog_id = absint( substr( $cap_key, strlen( $base_prefix ), - strlen( '_capabilities' ) ) );
+                                }
+                        }
+                }
+
+                if ( empty($cap_key) ) {
+                        $this->cap_key = $wpdb->get_blog_prefix( $this->blog_id ) . 'capabilities';
+                } else {
                         $this->cap_key = $cap_key;
+                }
 
                 $this->caps = get_user_meta( $this->ID, $this->cap_key, true );
 
@@ -478 +502 @@
          * @return array List of all capabilities for the user.
          */
         public function get_role_caps() {
+                $switch_site = false;
+                if ( is_multisite() && $this->blog_id !== get_current_blog_id() ) {
+                        $switch_site = $this->blog_id;
+
+                        switch_to_blog( $switch_site );
+                }
+
                 $wp_roles = wp_roles();
 
                 //Filter out caps that are not role names and assign to $this->roles
@@ -492 +523 @@
                 }
                 $this->allcaps = array_merge( (array) $this->allcaps, (array) $this->caps );
 
+                if ( $switch_site ) {
+                        restore_current_blog();
+                }
+
                 return $this->allcaps;
         }
 
@@ -780 +815 @@
          */
         public function for_blog( $blog_id = '' ) {
                 global $wpdb;
-                if ( ! empty( $blog_id ) )
-                        $cap_key = $wpdb->get_blog_prefix( $blog_id ) . 'capabilities';
-                else
+
+                if ( ! empty( $blog_id ) ) {
+                        $this->blog_id = absint( $blog_id );
+                        $cap_key = $wpdb->get_blog_prefix( $this->blog_id ) . 'capabilities';
+                } else {
+                        $this->blog_id = get_current_blog_id();
                         $cap_key = '';
+                }
+
                 $this->_init_caps( $cap_key );
         }
 }

tests/phpunit/tests/user/capabilities.php

@@ -1774 +1774 @@
                 $this->assertFalse( user_can( self::$users['contributor']->ID,   'remove_user', self::$users['contributor']->ID ) );
                 $this->assertFalse( user_can( self::$users['subscriber']->ID,    'remove_user', self::$users['subscriber']->ID ) );
         }
+
+        /**
+         * @ticket 36961
+         */
+        function test_init_user_caps_for_different_site() {
+                global $wpdb;
+
+                if ( ! is_multisite() ) {
+                        $this->markTestSkipped( 'Test only runs in multisite' );
+                }
+
+                $site_id = self::factory()->blog->create( array( 'user_id' => self::$users['administrator']->ID ) );
+
+                switch_to_blog( $site_id );
+
+                $role_name = 'uploader';
+                add_role( $role_name, 'Uploader', array(
+                        'read'         => true,
+                        'upload_files' => true,
+                ) );
+                add_user_to_blog( $site_id, self::$users['subscriber']->ID, $role_name );
+
+                restore_current_blog();
+
+                $user = new WP_User( self::$users['subscriber']->ID, '', $site_id );
+                $this->assertTrue( $user->has_cap( 'upload_files' ) );
+        }
 }

tests/phpunit/tests/user.php

@@ -180 +180 @@
                 $this->assertEquals( 'foo', $user->$key );
                 $this->assertEquals( 'foo', $user->data->$key );  // This will fail with WP < 3.3
 
-                foreach ( (array) $user as $key => $value ) {
+                foreach ( get_object_vars( $user ) as $key => $value ) {
                         $this->assertEquals( $value, $user->$key );
                 }
         }