[wp-trac] [WordPress Trac] #18209: Capabilities with misplaced dependencies in edit_theme_options

WordPress Trac wp-trac at lists.automattic.com
Fri Jul 22 06:33:08 UTC 2011


#18209: Capabilities with misplaced dependencies in edit_theme_options
--------------------------+-----------------------------
 Reporter:  Clorith       |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Themes        |    Version:  3.2.1
 Severity:  normal        |   Keywords:
--------------------------+-----------------------------
 When setting capabilities for other groups, the user is unable to add to
 theme options with just '''edit_theme_options''' if they do not also have
 '''edit_posts''' capabilities. The user will be able to delete things like
 menu elements, but may not add them without this flag.


 == How to reproduce; ==
 Edit capabilities of group removing all '''POSTS''' to hide the Posts
 Dashboard pages (works by just removing '''edit_posts''' as well).
 Give group '''edit_theme_options''' capabilities to edit their own menus.
 Users may now access the Theme Options, and may delete objects.
 User can add menu items to the preview, but once they Save these, the
 changes are not committed without the edit_posts permission.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/18209>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list