Capability checks missing for some links after a plugin/theme upgrade
|Reported by:||linuxologos||Owned by:||nacin|
After a plugin's/theme's update has been finished through the Dashboard > Updates (update-core.php) screen, the "Return to Plugins page" or "Return to Themes page" links are offered, but there is no check if current user can access those pages (plugins.php/themes.php).
This problem can show up, if a user is given the update_core and one or both of update_plugins, update_themes capabilities, but doesn't have any of activate_plugins, edit_theme_options, switch_themes capabilities.
Change History (6)
- Owner set to nacin
- Resolution set to fixed
- Status changed from new to closed