Changeset 13043 for trunk/wp-admin/custom-background.php

Timestamp:

02/10/2010 04:49:16 PM (15 years ago)

Author:

ryan

Message:

Use switch_themes instead of edit_themes so that non super admins on multisite installs can customize headers and backgrounds. Add CYA cap checks.

File:

• trunk/wp-admin/custom-background.php (modified) (3 diffs)

trunk/wp-admin/custom-background.php

@@ -53 +53 @@
      */
     function init() {
+        if ( ! current_user_can('switch_themes') )
+            return;
+
         $page = add_theme_page(__('Custom Background'), __('Custom Background'), 'switch_themes', 'custom-background', array(&$this, 'admin_page'));
 
@@ -84 +87 @@
      */
     function take_action() {
+        if ( ! current_user_can('switch_themes') )
+            return;
+
         if ( isset($_POST['reset-background']) ) {
             check_admin_referer('custom-background');
@@ -235 +241 @@
      */
     function admin_page() {
+        if ( ! current_user_can('switch_themes') )
+            wp_die(__('You do not have permission to customize the background.'));
         $step = $this->step();
         if ( 1 == $step )