Ticket #43877: 43877.diff

src/wp-includes/class-wp-user.php

@@ -736 +736 @@
                 $args = array_merge( array( $cap, $this->ID ), $args );
                 $caps = call_user_func_array( 'map_meta_cap', $args );
 
-                // Multisite super admin has all caps by definition, Unless specifically denied.
+                if ( in_array( 'do_not_allow', $caps, true ) ) {
+                        return false;
+                }
+
+                // Multisite super admin has all caps by definition.
                 if ( is_multisite() && is_super_admin( $this->ID ) ) {
-                        if ( in_array( 'do_not_allow', $caps ) ) {
-                                return false;
-                        }
                         return true;
                 }
 
@@ -760 +761 @@
                 // Everyone is allowed to exist.
                 $capabilities['exist'] = true;
 
-                // Nobody is allowed to do things they are not allowed to do.
-                unset( $capabilities['do_not_allow'] );
-
                 // Must have ALL requested caps.
                 foreach ( (array) $caps as $cap ) {
                         if ( empty( $capabilities[ $cap ] ) ) {