Changeset 14178

Timestamp:

04/21/2010 05:58:10 PM (16 years ago)

Author:

ryan

Message:

Add multisite check on delete. Check promote_user cap. see #13074

File:

• trunk/wp-admin/users.php (modified) (2 diffs)

trunk/wp-admin/users.php

@@ -56 +56 @@
     $update = 'promote';
     foreach ( $userids as $id ) {
-        if ( ! current_user_can('edit_user', $id) )
+        if ( ! current_user_can('promote_user', $id) )
             wp_die(__('You can’t edit that user.'));
-        // The new role of the current user must also have edit_users caps
+        // The new role of the current user must also have promote_users caps
         if ( $id == $current_user->ID && !$wp_roles->role_objects[$_REQUEST['new_role']]->has_cap('promote_users') ) {
             $update = 'err_admin_role';
@@ -118 +118 @@
 
 case 'delete':
+    if ( is_multisite() )
+        wp_die( __('User deletion is not allowed from this screen.') );
+
     check_admin_referer('bulk-users');