current_user_can_for_blog() doesn't use map_meta_cap for multisite user admins
|Reported by:||jamescollins||Owned by:|
 introduced a new current_user_can_for_blog() function, which was based on how the existing current_user_can() function was implemented.
This included this check:
if( is_multisite() && is_super_admin() ) return true;
However this change didn't include the necessary change to the current_user_can_for_blog() function as well.
This means that currently the current_user_can_for_blog() will always return true for multisite user admins, without map_meta_cap ever being used.
Change History (11)
- Milestone changed from 3.0.2 to 3.1
- Resolution set to fixed
- Status changed from new to closed
- Milestone changed from 3.1 to 3.0.2
- Resolution fixed deleted
- Status changed from closed to reopened