WordPress.org

Make WordPress Core

Opened 9 months ago

#52350 new enhancement

Add documentation about meta capabilities

Reported by: derweili Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Role/Capability Keywords: needs-docs
Focuses: docs Cc:

Description

While working on a capabilities bug at the REST-API and also while working on custom access-management-plugin I noticed there are no docs about Meta Capabilities.

WordPress has primitive capabilities and meta capabilities but the docs do not describe how they are related wich each other.
The "Roles and Capabilities" support article dos not even mention the "meta capabilities". The existence of meta capabilities is more or less concealed.
https://wordpress.org/support/article/roles-and-capabilities/

Furthermore I noticed there is a special "do_not_allow" Keyword which can be used to prevent the user to execute the current action.
This is also not mentioned in the docs.

The missing docs about the (meta-) capabilities topic makes it difficult for developers to deal with capabilities. It also potentially causes capabilities to be used incorrectly in core since there is no official guidance on how to use them.

Change History (0)

Note: See TracTickets for help on using tickets.