Changeset 10268

Timestamp:

12/30/2008 07:38:44 PM (18 years ago)

Author:

ryan

Message:

Show actions and checkbox only if user is editable by current user. Props jeremyclarke. fixes #8760

File:

• trunk/wp-admin/includes/template.php (modified) (4 diffs)

trunk/wp-admin/includes/template.php

@@ -1806 +1806 @@
                 $short_url = substr( $short_url, 0, 32 ).'...';
         $numposts = get_usernumposts( $user_object->ID );
+        $checkbox = '';
+        // Check if the user for this row is editable 
         if ( current_user_can( 'edit_user', $user_object->ID ) ) {
+                // Set up the user editing link 
+                // TODO: make profile/user-edit determination a seperate function
                 if ($current_user->ID == $user_object->ID) {
                         $edit_link = 'profile.php';
@@ -1813 +1817 @@
                 }
                 $edit = "<strong><a href=\"$edit_link\">$user_object->user_login</a></strong><br />";
+                
+                // Set up the hover actions for this user
                 $actions = array();
                 $actions['edit'] = '<a href="' . $edit_link . '">' . __('Edit') . '</a>';
@@ -1826 +1832 @@
                 }
                 $edit .= '</div>';
+                
+                // Set up the checkbox (because the user is editable, otherwise its empty)
+                $checkbox = "<input type='checkbox' name='users[]' id='user_{$user_object->ID}' class='$role' value='{$user_object->ID}' />";
+                
         } else {
                 $edit = '<strong>' . $user_object->user_login . '</strong>';
@@ -1845 +1855 @@
                 switch ($column_name) {
                         case 'cb':
-                                $r .= "<th scope='row' class='check-column'><input type='checkbox' name='users[]' id='user_{$user_object->ID}' class='$role' value='{$user_object->ID}' /></th>";
+                                $r .= "<th scope='row' class='check-column'>$checkbox</th>";
                                 break;
                         case 'username':