Changeset 53882 for trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-application-passwords-controller.php

Timestamp:

08/11/2022 06:22:59 PM (2 years ago)

Author:

johnbillion

Message:

Application Passwords: Allow a Super Admin to set an application password on a site they're not a member of.

This removes the requirement that a Super Admin must be a member of the current site when they attempt to set an application password within the admin area of an individual site on the network.

Props TimothyBlynJacobs, ilovecats7, johnbillion, georgestephanis, johnjamesjacoby

Fixes #53224

File:

• trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-application-passwords-controller.php (modified) (1 diff)

trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-application-passwords-controller.php

@@ -720 +720 @@
         }
 
-        if ( is_multisite() && ! is_user_member_of_blog( $user->ID ) ) {
+        if ( is_multisite() && ! user_can( $user->ID, 'manage_sites' ) && ! is_user_member_of_blog( $user->ID ) ) {
             return $error;
         }