Opened 4 years ago
#52350 new enhancement
Add documentation about meta capabilities
| Reported by: |
|
Owned by: | |
|---|---|---|---|
| Milestone: | Awaiting Review | Priority: | normal |
| Severity: | normal | Version: | |
| Component: | Role/Capability | Keywords: | needs-docs |
| Focuses: | docs | Cc: |
Description
While working on a capabilities bug at the REST-API and also while working on custom access-management-plugin I noticed there are no docs about Meta Capabilities.
WordPress has primitive capabilities and meta capabilities but the docs do not describe how they are related wich each other.
The "Roles and Capabilities" support article dos not even mention the "meta capabilities". The existence of meta capabilities is more or less concealed.
https://wordpress.org/support/article/roles-and-capabilities/
Furthermore I noticed there is a special "do_not_allow" Keyword which can be used to prevent the user to execute the current action.
This is also not mentioned in the docs.
The missing docs about the (meta-) capabilities topic makes it difficult for developers to deal with capabilities. It also potentially causes capabilities to be used incorrectly in core since there is no official guidance on how to use them.