WordPress.org
Get WordPress

Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #43936, comment 66


Ignore:
Timestamp:
10/25/2024 11:49:55 AM (5 months ago)
Author:
benniledl
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #43936, comment 66

    initial v1  
    22WordPress recommends assigning the "Author" role (which is the first role with this capability) only to trusted authors. However, this assumes that roles haven't been customized to bypass this capability check.
    33
    4 Would it be better to check all capabilities, excluding only those available to the "Contributor" (an untrusted) role? Here's a reference to the capabilities assigned to Contributors: WordPress Roles and Capabilities.
     4Would it be better to check all capabilities, excluding only those available to the "Contributor" (an untrusted) role? Here's a reference to the capabilities assigned to Contributors: [https://wordpress.org/documentation/article/roles-and-capabilities/ WordPress Roles and Capabilities].