Changeset 17432 for branches/3.1/wp-admin/users.php

Timestamp:

02/09/2011 05:30:46 PM (14 years ago)

Author:

ryan

Message:

Add additional promote_users checks. Show Add existing button only for multisite. Don't show bulk actions if user can't promote users. Show add new user menu if user has create_users but not promote_users. Props nacin. fixes #16501 for 3.1

File:

• branches/3.1/wp-admin/users.php (modified) (2 diffs)

branches/3.1/wp-admin/users.php

@@ -48 +48 @@
 case 'promote':
     check_admin_referer('bulk-users');
+
+    if ( ! current_user_can( 'promote_users' ) )
+        wp_die( __( 'You can’t edit that user.' ) );
 
     if ( empty($_REQUEST['users']) ) {
@@ -353 +356 @@
 if ( current_user_can( 'create_users' ) ) { ?>
     <a href="user-new.php" class="button add-new-h2"><?php echo esc_html_x( 'Add New', 'user' ); ?></a>
-<?php } elseif ( current_user_can( 'promote_users' ) ) { ?>
+<?php } elseif ( is_multisite() && current_user_can( 'promote_users' ) ) { ?>
     <a href="user-new.php" class="button add-new-h2"><?php echo esc_html_x( 'Add Existing', 'user' ); ?></a>
 <?php }