Changeset 33987

Timestamp:

09/10/2015 03:20:11 AM (9 years ago)

Author:

jeremyfelt

Message:

Multisite: Test edit_user capabilities for multisite administrators

An administrator in multisite can not edit users other than itself.

Props daniellandau for the initial patch.
See #16860.

File:

• trunk/tests/phpunit/tests/user/capabilities.php (modified) (1 diff)

trunk/tests/phpunit/tests/user/capabilities.php

@@ -937 +937 @@
         $this->assertFalse( current_user_can( 'edit_post', $post + 1 ) );
     }
+
+    function test_multisite_administrator_can_not_edit_users() {
+        if ( ! is_multisite() ) {
+            $this->markTestSkipped( 'Test only runs in multisite' );
+            return;
+        }
+
+        $user = new WP_User( $this->factory->user->create( array( 'role' => 'administrator' ) ) );
+        $other_user = new WP_User( $this->factory->user->create( array( 'role' => 'subscriber' ) ) );
+
+        wp_set_current_user( $user->ID );
+
+        $this->assertFalse( current_user_can( 'edit_user', $other_user->ID ) );
+    }
+
+    function test_multisite_user_can_edit_self() {
+        if ( ! is_multisite() ) {
+            $this->markTestSkipped( 'Test only runs in multisite' );
+            return;
+        }
+
+        $user = new WP_User( $this->factory->user->create( array( 'role' => 'administrator' ) ) );
+
+        wp_set_current_user( $user->ID );
+
+        $this->assertTrue( current_user_can( 'edit_user', $user->ID ) );
+    }
 }