Changeset 45508 for branches/5.2/src/wp-admin/includes/ajax-actions.php

Timestamp:

06/10/2019 07:49:27 AM (5 years ago)

Author:

peterwilsoncc

Message:

Site health: Introduce view_site_health_checks capability.

Introduces the faux primitive capability view_site_health_checks available to single site admins and multisite super-admin to view the site health page within the admin.

The capability is mapped to the install_plugins capability without being dependent on the file system being writable. This fixes a bug where the feature couldn't be used by sites unable to write to the file system or managed through version control.

The capability is granted on the user_has_cap filter.

Props birgire, Clorith, palmiak, peterwilsoncc, spacedmonkey.
Merges [45507] to the 5.2 branch.
Fixes #46957 for 5.2.2.

Location:

branches/5.2

Files:

• . (modified) (1 prop)
• src/wp-admin/includes/ajax-actions.php (modified) (6 diffs)

branches/5.2/src/wp-admin/includes/ajax-actions.php

@@ -4870 +4870 @@
     check_ajax_referer( 'health-check-site-status' );
 
-    if ( ! current_user_can( 'install_plugins' ) ) {
+    if ( ! current_user_can( 'view_site_health_checks' ) ) {
         wp_send_json_error();
     }
@@ -4890 +4890 @@
     wp_verify_nonce( 'health-check-site-status' );
 
-    if ( ! current_user_can( 'install_plugins' ) ) {
+    if ( ! current_user_can( 'view_site_health_checks' ) ) {
         wp_send_json_error();
     }
@@ -4910 +4910 @@
     check_ajax_referer( 'health-check-site-status' );
 
-    if ( ! current_user_can( 'install_plugins' ) ) {
+    if ( ! current_user_can( 'view_site_health_checks' ) ) {
         wp_send_json_error();
     }
@@ -4931 +4931 @@
     check_ajax_referer( 'health-check-site-status' );
 
-    if ( ! current_user_can( 'install_plugins' ) ) {
+    if ( ! current_user_can( 'view_site_health_checks' ) ) {
         wp_send_json_error();
     }
@@ -4951 +4951 @@
     check_ajax_referer( 'health-check-site-status-result' );
 
-    if ( ! current_user_can( 'install_plugins' ) ) {
+    if ( ! current_user_can( 'view_site_health_checks' ) ) {
         wp_send_json_error();
     }
@@ -4968 +4968 @@
     check_ajax_referer( 'health-check-site-status-result' );
 
-    if ( ! current_user_can( 'install_plugins' ) || is_multisite() ) {
+    if ( ! current_user_can( 'view_site_health_checks' ) || is_multisite() ) {
         wp_send_json_error();
     }