Ticket #8770: wpadmin-users_dec31-08.diff

wp-admin/users.php

@@ -39 +39 @@
 
 switch ($doaction) {
 
+/* Bulk Dropdown menu Role changes */
 case 'promote':
         check_admin_referer('bulk-users');
 
@@ -47 +48 @@
                 exit();
         }
 
-        if ( !current_user_can('edit_users') )
-                wp_die(__('You can’t edit users.'));
+        $editable_roles = get_editable_roles();
+        if (!$editable_roles[$_REQUEST['new_role']])
+                wp_die(__('You can’t give users that role.'));
 
         $userids = $_REQUEST['users'];
         $update = 'promote';