Changeset 10323 for trunk/wp-admin/users.php

Timestamp:

01/06/2009 10:00:05 PM (17 years ago)

Author:

ryan

Message:

Add get_editable_roles() and role filtering. Props jeremyclarke. fixes #8770

File:

• trunk/wp-admin/users.php (modified) (2 diffs)

trunk/wp-admin/users.php

@@ -40 +40 @@
 switch ($doaction) {
 
+/* Bulk Dropdown menu Role changes */
 case 'promote':
     check_admin_referer('bulk-users');
@@ -48 +49 @@
     }
 
-    if ( !current_user_can('edit_users') )
-        wp_die(__('You can’t edit users.'));
+    $editable_roles = get_editable_roles();
+    if (!$editable_roles[$_REQUEST['new_role']])
+        wp_die(__('You can’t give users that role.'));
 
     $userids = $_REQUEST['users'];