Introduce "delete_blog" capability

[thomaswm]

Currently, any user with administrator privileges for one blog within a multisite network can delete this specific blog. While the creation of new blogs can be restricted to network admins in the network options, there is no such option for the deletion of blogs.

When I dug into the code of wp-admin/ms-delete-site.php, I stumbled upon the following comment in line 15:

// @todo Create a delete blog cap.
if ( ! current_user_can( 'manage_options' ) )
wp_die(__( 'You do not have sufficient permissions to delete this site.'));

I'd suggest to introduce such a capability. Then it would be possible to control who is able to delete a blog within the multisite network.

[jeremyfelt]

Thanks for the ticket, @thomaswm!

This is a tough one. I completely agree that a delete_blog (or really delete_site) capability should be available. However, since manage_options has been used for years, we can't necessarily swap the two out. I'm not sure how likely it is that custom requirements would remove manage_options from the administrator role, but it's possible. It's probably more likely that manage_options has been added to a custom set of users in some cases.

We could map delete_site to manage_options in map_meta_cap()... possibly the safest bet as this would default to everyone with manage_options capabilities.

Ideas welcome. :)

[johnbillion]

Replying to jeremyfelt:

We could map delete_site to manage_options in map_meta_cap()

This is what we usually do whenever more granular capabilities are introduced.

[thomaswm]

Introduces delete_site capability and maps it to manage_options

[thomaswm]

Also changes occurrence of capability in wp-admin/menu.php

[jeremyfelt]

In 31673:

Introduce delete_site meta capability.

Map delete_site as a meta capability to manage_options so that the ability to delete sites can be more granularly managed for individual site administrators on a multisite network.

Props thomaswm.

Fixes #30470.

[nacin]

+1 :-)