multisite permission checks should use caps when available

[Denis-de-Bernardy]

r12722 introduces a bunch of checks such as:

if ( !is_multisite() || is_super_admin() )

they should be replaced with checks such as:

if ( current_user_can('install_plugins') )

[Denis-de-Bernardy]

r12722 should really be reversed outright, even. this kind of change makes no sense whatsoever:

-  if ( current_user_can('update_themes') ) 
+  if ( ( !is_multisite() && current_user_can('update_themes') ) || is_super_admin() )

the actual meta cap check should be changed instead if needed, and mu sites should never grant update_themes to anyone *but* a super admin in the first place.

[wpmuguru]

In MU only site admins can install plugins and themes.

The logic added keeps the existing WP logic when multisite is not enabled and enforces the existing MU permissions when multisite is enabled.

[nacin]

Replying to wpmuguru:

In MU only site admins can install plugins and themes.

The logic added keeps the existing WP logic when multisite is not enabled and enforces the existing MU permissions when multisite is enabled.

Right but map_meta_cap() should be used for this, is what Denis is saying. I'm pretty sure ryan added multisite-specific mapping for these capabilities already.

[ryan]

I added them. caps that should be removed from regular admins when multisite is enabled are now removed by map_meta_cap. It does the multisite and superadmun check for you.

[wpmuguru]

(In [12724]) revert permission check in [12722], props ddebernardy, See #11894

[ryan]

I changed several more to caps for #11644.