WordPress.org
Get WordPress

Make WordPress Core

Opened 16 years ago

Closed 16 years ago

#13944 closed defect (bug) (fixed)

wp-admin/plugins.php still accessible by normal user in multisite

Reported by: itxitx Owned by:
Priority: high Milestone: 3.0
Component: Plugins Version: 3.0
Severity: blocker Keywords: has-patch dev-feedback
Cc: Focuses:

Description

If "Super Admin > Options >Enable administration menus > plugins" unchecked, the Plugins menus are disappear by normal user, but somehow the normal user can still access the plugins if they go to /wp-admin/plugins.php
it's not happen in wpmu 2.9.2, they displaying "Page disabled by the administrator"

Attachments (3)

13944.patch​ (661 bytes ) - added by ocean90 16 years ago.
13944.2.patch​ (1.2 KB ) - added by ocean90 16 years ago.
Merge wp_die and admin_notice
13944.3.patch​ (1.2 KB ) - added by ocean90 16 years ago.

Download all attachments as: .zip

Change History (8)

#1 @ocean90
16 years ago

  • Keywords needs-patch added; plugins removed
  • Severity normal → blocker

Thx for reporting this!

@ocean90
16 years ago

#2 @ocean90
16 years ago

13944.patch: I used the same code as it's used in WPMU.

#3 @ocean90
16 years ago

  • Keywords has-patch dev-feedback added; multisite needs-patch removed

@ocean90
16 years ago

Merge wp_die and admin_notice

@ocean90
16 years ago

#4 @ocean90
16 years ago

13944.3.patch: Works now for me. I use 'Cheatin’ uh?' so that we didn't have a new string.

#5 @ryan
16 years ago

  • Resolution → fixed
  • Status new → closed

(In [15271]) Allow only super admins to see plugins.php if the Plugins menu is not exposed. Props ocean90. fixes #13944

Note: See TracTickets for help on using tickets.