Changeset 43147 for trunk/src/wp-admin/privacy.php

Timestamp:

05/03/2018 05:24:35 PM (7 years ago)

Author:

iandunn

Message:

Privacy: Limit Privacy Settings screen to Super Admins in Multisite.

In many common Multisite use cases, the network administrator will want to set a network-wide privacy policy -- via the privacy_policy_url filter -- for consistency and convenience. When that's done, the Privacy Settings screen on individual sites becomes unnecessary, and may confuse administrators of those sites when they see that their changes don't have any effect on the policy link in the footer.

Since we can't programatically determine which behavior the network admins would like, the safest default setting is to restrict the ability to super admins, and let them delegate it to individual site owners via a plugin, if they'd like to.

Fixes #43935.

File:

• trunk/src/wp-admin/privacy.php (modified) (1 diff)

trunk/src/wp-admin/privacy.php

@@ -10 +10 @@
 require_once( dirname( __FILE__ ) . '/admin.php' );
 
-if ( ! current_user_can( 'manage_options' ) ) {
+if ( ! current_user_can( 'manage_privacy_policy' ) ) {
     wp_die( __( 'Sorry, you are not allowed to manage privacy on this site.' ) );
 }