Changeset 50114 for trunk/src/wp-includes/capabilities.php

Timestamp:

01/31/2021 07:02:30 PM (4 years ago)

Author:

TimothyBlynJacobs

Message:

App Passwords: Introduce fine grained capabilities.

Previously, all permission checks for using app passwords were implemented using edit_user. This commit introduces a series of more fine grained meta capabilities that should be used instead: create_app_password, list_app_passwords, read_app_password, edit_app_password, delete_app_password and delete_app_passwords. These capabilities all map to edit_user by default, but may now be customized by developers.

Props johnbillion, TimothyBlynJacobs.
Fixes #51703.

File:

• trunk/src/wp-includes/capabilities.php (modified) (1 diff)

trunk/src/wp-includes/capabilities.php

@@ -593 +593 @@
             $caps[] = is_multisite() ? 'manage_network' : 'manage_options';
             break;
+        case 'create_app_password':
+        case 'list_app_passwords':
+        case 'read_app_password':
+        case 'edit_app_password':
+        case 'delete_app_passwords':
+        case 'delete_app_password':
+            $caps = map_meta_cap( 'edit_user', $user_id, $args[0] );
+            break;
         default:
             // Handle meta capabilities for custom post types.