Changeset 33988 for trunk/src/wp-admin/user-new.php

Timestamp:

09/10/2015 03:33:22 AM (9 years ago)

Author:

jeremyfelt

Message:

Multisite: Allow users with manage_network_users to edit network users.

Other users in a network can now be given capabilities to manage users without also having global super admin privileges.

• Users with manage_network_users can not edit super admins.
• Users with manage_network_users can not promote users to super admin.
• Uses of is_super_admin() in user-new.php are now updated to manage_network_users.

Props daniellandau, chriscct7.
Fixes #16860.

File:

• trunk/src/wp-admin/user-new.php (modified) (4 diffs)

trunk/src/wp-admin/user-new.php

@@ -85 +85 @@
         $redirect = add_query_arg( array('update' => 'addexisting'), 'user-new.php' );
     } else {
-        if ( isset( $_POST[ 'noconfirmation' ] ) && is_super_admin() ) {
+        if ( isset( $_POST[ 'noconfirmation' ] ) && current_user_can( 'manage_network_users' ) ) {
             add_existing_user_to_blog( array( 'user_id' => $user_id, 'role' => $_REQUEST[ 'role' ] ) );
             $redirect = add_query_arg( array('update' => 'addnoconfirmation'), 'user-new.php' );
@@ -159 +159 @@
              */
             $new_user_login = apply_filters( 'pre_user_login', sanitize_user( wp_unslash( $_REQUEST['user_login'] ), true ) );
-            if ( isset( $_POST[ 'noconfirmation' ] ) && is_super_admin() ) {
+            if ( isset( $_POST[ 'noconfirmation' ] ) && current_user_can( 'manage_network_users' ) ) {
                 add_filter( 'wpmu_signup_user_notification', '__return_false' ); // Disable confirmation email
                 add_filter( 'wpmu_welcome_user_notification', '__return_false' ); // Disable welcome email
             }
             wpmu_signup_user( $new_user_login, $new_user_email, array( 'add_to_blog' => $wpdb->blogid, 'new_role' => $_REQUEST['role'] ) );
-            if ( isset( $_POST[ 'noconfirmation' ] ) && is_super_admin() ) {
+            if ( isset( $_POST[ 'noconfirmation' ] ) && current_user_can( 'manage_network_users' ) ) {
                 $key = $wpdb->get_var( $wpdb->prepare( "SELECT activation_key FROM {$wpdb->signups} WHERE user_login = %s AND user_email = %s", $new_user_login, $new_user_email ) );
                 wpmu_activate_signup( $key );
@@ -340 +340 @@
         </td>
     </tr>
-<?php if ( is_super_admin() ) { ?>
+<?php if ( current_user_can( 'manage_network_users' ) ) { ?>
     <tr>
         <th scope="row"><label for="adduser-noconfirmation"><?php _e('Skip Confirmation Email') ?></label></th>
@@ -477 +477 @@
         </td>
     </tr>
-    <?php if ( is_multisite() && is_super_admin() ) { ?>
+    <?php if ( is_multisite() && current_user_can( 'manage_network_users' ) ) { ?>
     <tr>
         <th scope="row"><label for="noconfirmation"><?php _e('Skip Confirmation Email') ?></label></th>