Changeset 33987

Timestamp:

09/10/2015 03:20:11 AM (11 years ago)

Author:

jeremyfelt

Message:

Multisite: Test edit_user capabilities for multisite administrators

An administrator in multisite can not edit users other than itself.

Props daniellandau for the initial patch.
See #16860.

File:

• trunk/tests/phpunit/tests/user/capabilities.php (modified) (1 diff)

trunk/tests/phpunit/tests/user/capabilities.php

@@ -937 +937 @@
                 $this->assertFalse( current_user_can( 'edit_post', $post + 1 ) );
         }
+
+        function test_multisite_administrator_can_not_edit_users() {
+                if ( ! is_multisite() ) {
+                        $this->markTestSkipped( 'Test only runs in multisite' );
+                        return;
+                }
+
+                $user = new WP_User( $this->factory->user->create( array( 'role' => 'administrator' ) ) );
+                $other_user = new WP_User( $this->factory->user->create( array( 'role' => 'subscriber' ) ) );
+
+                wp_set_current_user( $user->ID );
+
+                $this->assertFalse( current_user_can( 'edit_user', $other_user->ID ) );
+        }
+
+        function test_multisite_user_can_edit_self() {
+                if ( ! is_multisite() ) {
+                        $this->markTestSkipped( 'Test only runs in multisite' );
+                        return;
+                }
+
+                $user = new WP_User( $this->factory->user->create( array( 'role' => 'administrator' ) ) );
+
+                wp_set_current_user( $user->ID );
+
+                $this->assertTrue( current_user_can( 'edit_user', $user->ID ) );
+        }
 }