Make WordPress Core


Ignore:
Timestamp:
08/18/2017 06:30:28 PM (9 years ago)
Author:
flixos90
Message:

Role/Capability: Introduce capabilities dedicated to installing and updating language files.

The new meta capabilities are called install_languages and update_languages. Prior to this change, there were no proper capability checks applied. Instead only the filesystem and related constants were checked, and for actual permissions a rather vague fallback was used where a user needed to have at least one of the other updating capabilities. In addition to being generally more verbose, the new capabilities make it possible for example to allow a user to update languages, but nothing else. By default they fall back to the original way of how they were handled.

Props johnbillion, flixos90.
Fixes #39677.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/tests/phpunit/tests/user/capabilities.php

    r40999 r41268  
    234234                        'customize'              => array( 'administrator' ),
    235235                        'add_users'              => array( 'administrator' ),
     236                        'install_languages'      => array( 'administrator' ),
     237                        'update_languages'       => array( 'administrator' ),
    236238
    237239                        'edit_categories'        => array( 'administrator', 'editor' ),
    … …  
    262264                        'edit_css'               => array(),
    263265                        'upgrade_network'        => array(),
     266                        'install_languages'      => array(),
     267                        'update_languages'       => array(),
    264268
    265269                        'customize'              => array( 'administrator' ),
Note: See TracChangeset for help on using the changeset viewer.