Skip to content
This repository has been archived by the owner. It is now read-only.

Discrepancy in capabilities for removing users on Multisite. #2742

Open
BE-Webdesign opened this Issue Sep 29, 2016 · 1 comment

Comments

Projects
None yet
1 participant
@BE-Webdesign
Copy link
Member

BE-Webdesign commented Sep 29, 2016

Currently in the permissions check for deleting users we check for current_user_can( 'delete_user', $id ). We however only support removing users from a site at the moment, which actually uses a different capability remove_users. We would need to add a check for current_user_can( 'remove_user', $id ) for multisite installs. Support for deletion from the entire network is a separate issue in #1922, that is not necessarily related with this issue.

@BE-Webdesign

This comment has been minimized.

Copy link
Member Author

BE-Webdesign commented Sep 30, 2016

If someone could double check me that would be great too, as the capabilities in WordPress can often be confusing.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
You can’t perform that action at this time.