Changeset 33988 for trunk/tests/phpunit/tests/user/capabilities.php

Timestamp:

09/10/2015 03:33:22 AM (9 years ago)

Author:

jeremyfelt

Message:

Multisite: Allow users with manage_network_users to edit network users.

Other users in a network can now be given capabilities to manage users without also having global super admin privileges.

• Users with manage_network_users can not edit super admins.
• Users with manage_network_users can not promote users to super admin.
• Uses of is_super_admin() in user-new.php are now updated to manage_network_users.

Props daniellandau, chriscct7.
Fixes #16860.

File:

• trunk/tests/phpunit/tests/user/capabilities.php (modified) (1 diff)

trunk/tests/phpunit/tests/user/capabilities.php

@@ -964 +964 @@
         $this->assertTrue( current_user_can( 'edit_user', $user->ID ) );
     }
+
+    function test_multisite_administrator_with_manage_network_users_can_edit_users() {
+        if ( ! is_multisite() ) {
+            $this->markTestSkipped( 'Test only runs in multisite' );
+            return;
+        }
+
+        $user = new WP_User( $this->factory->user->create( array( 'role' => 'administrator' ) ) );
+        $user->add_cap( 'manage_network_users' );
+        $other_user = new WP_User( $this->factory->user->create( array( 'role' => 'subscriber' ) ) );
+
+        wp_set_current_user( $user->ID );
+
+        $this->assertTrue( current_user_can( 'edit_user', $other_user->ID ) );
+    }
+
+    function test_multisite_administrator_with_manage_network_users_can_not_edit_super_admin() {
+        if ( ! is_multisite() ) {
+            $this->markTestSkipped( 'Test only runs in multisite' );
+            return;
+        }
+
+        $user = new WP_User( $this->factory->user->create( array( 'role' => 'administrator' ) ) );
+        $user->add_cap( 'manage_network_users' );
+        $super_admin = new WP_User( $this->factory->user->create( array( 'role' => 'subscriber' ) ) );
+        grant_super_admin( $super_admin->ID );
+
+        wp_set_current_user( $user->ID );
+
+        $this->assertFalse( current_user_can( 'edit_user', $super_admin->ID ) );
+    }
 }