#42552 closed defect (bug) (fixed)
Network Users: Don't show edit links for users if the current user cannot edit them
Reported by: | ocean90 | Owned by: | flixos90 |
---|---|---|---|
Milestone: | 5.1 | Priority: | normal |
Severity: | normal | Version: | |
Component: | Users | Keywords: | has-patch |
Focuses: | multisite | Cc: |
Description
Unlike wp-admin/users.php, the network screen always links the user names to the edit screen even if the current user cannot edit them. The attached patch adds the missing current_user_can( 'edit_user' )
checks.
Attachments (1)
Change History (5)
Note: See
TracTickets for help on using
tickets.
+1. This patch looks how I expect for these links to work.
This also makes a lot of sense now that network capability coverage has increased in other areas.
For context, many newer network caps are unique keys for their screens which are mapped to other primitive caps. I do not think these links need to be unique keys, and believe
edit_user
is the correct capability to use here as patched.