Make WordPress Core

Opened 19 years ago

Closed 19 years ago

#3074 closed defect (bug) (fixed)

Blogroll "shortcut" in Dashboard leads to broken link when logged in as a less capable user

Reported by: jeremyvisser's profile JeremyVisser Owned by: markjaquith's profile markjaquith
Milestone: 2.1 Priority: normal
Severity: normal Version: 2.0.4
Component: Administration Keywords: has-patch
Focuses: Cc:

Description

I've just noticed that when I create a user with the role of Author or Contributor, it does not have the capability to manage the Blogroll but still the Dashboard has a shortcut to the Links page and creates an ugly error message when clicked.

To reproduce this, create a user called Bob. Make him a Contributor. Log him on. Click the "Add a link to your blogroll" link on the Dashboard. Read the message ;).

P.S.: This occurs in 2.0.4 and there appears to be no milestone selectable for 2.0.5. Does that mean you're not planning on any more releases in the 2.0 branch?

Attachments (1)

links_to_get_started_CAPS.diff (1.5 KB) - added by markjaquith 19 years ago.
patch for /trunk/

Download all attachments as: .zip

Change History (4)

#1 @ryan
19 years ago

We need a current_user_can('manage_links') check around that.

@markjaquith
19 years ago

patch for /trunk/

#2 @markjaquith
19 years ago

  • Keywords has-patch added
  • Owner changed from anonymous to markjaquith
  • Status changed from new to assigned

Patch adds the check.

I also added checks for the post writing and theme changing links.

#3 @ryan
19 years ago

  • Resolution set to fixed
  • Status changed from assigned to closed

(In [4130]) Add cap checks around getting started links. Props Mark J. fixes #3074

Note: See TracTickets for help on using tickets.