Changeset 14088

Timestamp:

04/14/2010 05:22:11 PM (13 years ago)

Author:

ryan

Message:

Introduce DISALLOW_FILE_MOD for disabling all ops that modify core, theme, or plugins files. see #13000

File:

• trunk/wp-includes/capabilities.php (modified) (2 diffs)

trunk/wp-includes/capabilities.php

@@ -994 +994 @@
         }
         // Fall through if not DISALLOW_FILE_EDIT.
-    case 'unfiltered_html':
     case 'update_plugins':
     case 'delete_plugins':
@@ -1002 +1001 @@
     case 'install_themes':
     case 'update_core':
+        // Disallow anything that creates, deletes, or edits core, plugin, or theme files.
+        // Files in uploads are excepted.
+        if ( defined('DISALLOW_FILE_MODS') && DISALLOW_FILE_MODS ) {
+            $caps[] = 'do_not_allow';
+            break;
+        }
+        // Fall through if not DISALLOW_FILE_MODS.
+    case 'unfiltered_html':
     case 'delete_user':
     case 'delete_users':