Inline file upload should be controlled by configuration

[doit-cu]

At a minimum, an administrator should be able to turn this on/off in the options section. I see there's already a current_user_can statement in inline-uploading.php, so it might be nice to handle it via some capabilities. Finally, it might be nice to control which MIME types can be uploaded via some interface, rather than hard coding them.

[skeltoac]

Like so many other customizable features, this one will be used by such a tiny minority that it belongs in the realm of plugins.

Except perhaps a single checkbox for the administrator role: "Display the Upload interface on Write screens."

[davidhouse]

I'll definitely go with the cap, I'm less sold on the config option: I'll sit on the fence for that one. Drafting up a patch to add the cap.

[davidhouse]

There already was a cap, upload_files, which I've used. Guess it was hanging around from the legacy upload code.

[doit-cu]

There's a slight bug in that approach- logged in users can still view inline-uploading.php directly by passing in action=whatever on the query string.

[doit-cu]

Forgive me, I'm new to this. inline-up.diff is incorrect. inline-uploading.diff should be correct.

[doit-cu]

Corrected inline-up.diff

[davidhouse]

Oops, you're right. Apply both patches.

[skeltoac]

davidhouse I'm confused.

[ryan]

(In [3456]) Check upload_files cap for inline uploader. Props David House and doit-cu. fixes #2302

[(none)]

Milestone 2.0.1 deleted