WordPress.org

Make WordPress Core

Opened 2 years ago

Closed 2 years ago

#44687 closed defect (bug) (invalid)

Newly created network sites have some missing capabilities

Reported by: programmin Owned by:
Milestone: Priority: normal
Severity: normal Version: 4.9.7
Component: Networks and Sites Keywords:
Focuses: administration, multisite Cc:

Description

Steps to reproduce issue:

In a multisite, go to sites->add new. Add a new one. Note the "Edit Site" has it id at the end of the link, so look in '[prefix]_[number]_options' table and find the newly created wp_[number]_options. The ending of this includes:

"author";a:2:{s:4:"name";s:6:"Author";s:12:"capabilities";a:10:{s:12:"upload_files";b:1;s:10:"edit_posts";b:1;s:20:"edit_published_posts";b:1;s:13:"publish_posts";b:1;s:4:"read";b:1;s:7:"level_2";b:1;s:7:"level_1";b:1;s:7:"level_0";b:1;s:12:"delete_posts";b:1;s:22:"delete_published_posts";b:1;}

What this means is effectively an author user on a multisite site is unable to "edit_published_pages", that is, they may not even edit pages that are assigned to them. This capability does exist and does work in a standard WP install though.

Change History (1)

#1 @johnbillion
2 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Status changed from new to closed

@programmin Thanks for the report. Authors cannot edit pages, even if a page is assigned to them via the "Author" field. See here: https://codex.wordpress.org/Roles_and_Capabilities#Capability_vs._Role_Table

You may want to check your single site installation as there may be a plugin on the site that's filtering your user capabilities.

Note: See TracTickets for help on using tickets.