Changeset 16551

Timestamp:

11/23/2010 04:29:21 PM (14 years ago)

Author:

ryan

Message:

Make sure create_users is strippped from blog admins for multisite setups where add_new_users is not enabled. see #15357

File:

• trunk/wp-includes/capabilities.php (modified) (1 diff)

trunk/wp-includes/capabilities.php

@@ -986 +986 @@
         break;
     case 'create_users':
-        if ( !is_multisite() || is_super_admin() || get_site_option( 'add_new_users' ) )
+        if ( !is_multisite() )
             $caps[] = $cap;
+        elseif ( is_super_admin() || get_site_option( 'add_new_users' ) )
+            $caps[] = $cap;
+        else
+            $caps[] = 'do_not_allow';
         break;
     default: