Changeset 16776

Timestamp:

12/07/2010 09:06:19 PM (15 years ago)

Author:

westi

Message:

Restore some more cap checks for clarity. See #15326.

Location:

trunk/wp-admin

Files:

• edit.php (modified) (1 diff)
• link-manager.php (modified) (1 diff)
• plugin-install.php (modified) (1 diff)
• plugins.php (modified) (1 diff)
• theme-install.php (modified) (1 diff)
• themes.php (modified) (1 diff)

trunk/wp-admin/edit.php

@@ -9 +9 @@
 /** WordPress Administration Bootstrap */
 require_once( './admin.php' );
-
+if ( !current_user_can( $post_type_object->cap->edit_posts ) )
+    wp_die( __( 'Cheatin’ uh?' ) );
+            
 $wp_list_table = get_list_table('WP_Posts_List_Table');
 $wp_list_table->check_permissions();

trunk/wp-admin/link-manager.php

@@ -9 +9 @@
 /** Load WordPress Administration Bootstrap */
 require_once ('admin.php');
+if ( ! current_user_can( 'manage_links' ) )
+    wp_die( __( 'You do not have sufficient permissions to edit the links for this site.' ) );
 
 $wp_list_table = get_list_table('WP_Links_List_Table');

trunk/wp-admin/plugin-install.php

@@ -12 +12 @@
 /** WordPress Administration Bootstrap */
 require_once('./admin.php');
-
+if ( ! current_user_can('install_plugins') )
+    wp_die(__('You do not have sufficient permissions to install plugins on this site.'));
+            
 if ( is_multisite() && ! is_network_admin() ) {
     wp_redirect( network_admin_url( 'plugin-install.php' ) );

trunk/wp-admin/plugins.php

@@ -10 +10 @@
 require_once('./admin.php');
 
+if ( !current_user_can('activate_plugins') )
+    wp_die( __( 'You do not have sufficient permissions to manage plugins for this site.' ) );
+            
 $wp_list_table = get_list_table('WP_Plugins_List_Table');
 $wp_list_table->check_permissions();

trunk/wp-admin/theme-install.php

@@ -12 +12 @@
 /** WordPress Administration Bootstrap */
 require_once('./admin.php');
+if ( ! current_user_can('install_themes') )
+    wp_die( __( 'You do not have sufficient permissions to install themes on this site.' ) );
 
 if ( is_multisite() && ! is_network_admin() ) {

trunk/wp-admin/themes.php

@@ -9 +9 @@
 /** WordPress Administration Bootstrap */
 require_once('./admin.php');
-
+if ( !current_user_can('switch_themes') && !current_user_can('edit_theme_options') )
+    wp_die( __( 'Cheatin’ uh?' ) );
+            
 $wp_list_table = get_list_table('WP_Themes_List_Table');
 $wp_list_table->check_permissions();