Make WordPress Core

Opened 5 years ago

Last modified 5 years ago

#48865 reopened defect (bug)

Multisite Set up - Input field getting remove from filter when other user user roles except Super Admin filter on page/post

Reported by: mohitdadhich10's profile mohitdadhich10 Owned by:
Milestone: Priority: normal
Severity: major Version: 5.3
Component: Role/Capability Keywords:
Focuses: administration, multisite Cc:

Description

When any user except super admin edit page or post having Input field or filter in that case WP automatically removes Input list. It is a major issue.

Step to reproduce:

1) Multisite Set Up

2) Super Admin user - admin created user [xyz] having user role as administrator.

3) Super Admin created one post and added classic block with input fields(select, input type text etc.) or added any custom block which contain input fields.

4) Now update the page and it's working fine both side(front & Admin).

5) Now Administrator user[xyz] edit same post and add the heading tag or something else and update the post. After refreshing the page on both side you can see that input field get removed.

Issue exist on both WordPress 5.3 and WordPress 5.2.4

See below video for detail :
[https://www.screencast.com/t/06MPnPuwtu
][]

Attachments (1)

InputField_issue.mp4 (5.9 MB) - added by mohitdadhich10 5 years ago.

Change History (3)

#1 @SergeyBiryukov
5 years ago

  • Focuses ui css removed
  • Keywords needs-patch removed
  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Status changed from new to closed

Hi there, welcome to WordPress Trac! Thanks for the report.

This works as intended. On single site, admins and editors can post unfiltered HTML, however these roles are not considered trustworthy on Multisite, so only super admins have the unfiltered_html capability there.

This is one of WordPress design decisions, see Unfiltered HTML for editors, administrators; multisite for more details.

See also previous discussions in #19791, #23820, #23798, #34786, #43338.

If you want to enable unfiltered HTML for admins and editors on your Multisite install, there is an Unfiltered MU plugin for that. Note that it still works as expected, despite that alarming message at the top.

#2 @mohitdadhich10
5 years ago

  • Resolution duplicate deleted
  • Status changed from closed to reopened

Hello @SergeyBiryukov ,

Thanks for the reply !

I'm totally agree with you but my concern is that if Administrator make any changes in either page or post like input fields(select, input type text etc.) or added any custom block which contain input fields must not get inactive after changes from administrator. Super admin content must not change in that case. But currently Content added by Super Admin also getting manipulate.

Kindly provide your thoughts on it.

Note: See TracTickets for help on using tickets.