Make WordPress Core


Ignore:
Timestamp:
08/18/2017 06:30:28 PM (7 years ago)
Author:
flixos90
Message:

Role/Capability: Introduce capabilities dedicated to installing and updating language files.

The new meta capabilities are called install_languages and update_languages. Prior to this change, there were no proper capability checks applied. Instead only the filesystem and related constants were checked, and for actual permissions a rather vague fallback was used where a user needed to have at least one of the other updating capabilities. In addition to being generally more verbose, the new capabilities make it possible for example to allow a user to update languages, but nothing else. By default they fall back to the original way of how they were handled.

Props johnbillion, flixos90.
Fixes #39677.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/tests/phpunit/tests/user/capabilities.php

    r40999 r41268  
    234234            'customize'              => array( 'administrator' ),
    235235            'add_users'              => array( 'administrator' ),
     236            'install_languages'      => array( 'administrator' ),
     237            'update_languages'       => array( 'administrator' ),
    236238
    237239            'edit_categories'        => array( 'administrator', 'editor' ),
     
    262264            'edit_css'               => array(),
    263265            'upgrade_network'        => array(),
     266            'install_languages'      => array(),
     267            'update_languages'       => array(),
    264268
    265269            'customize'              => array( 'administrator' ),
Note: See TracChangeset for help on using the changeset viewer.