You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Sep 24, 2018. It is now read-only.
Repository navigation
This repository was archived by the owner on Sep 24, 2018. It is now read-only.
Discrepancy in capabilities for removing users on Multisite. #2742
Currently in the permissions check for deleting users we check for current_user_can( 'delete_user', $id ). We however only support removing users from a site at the moment, which actually uses a different capability remove_users. We would need to add a check for current_user_can( 'remove_user', $id ) for multisite installs. Support for deletion from the entire network is a separate issue in #1922, that is not necessarily related with this issue.
Currently in the permissions check for deleting users we check for
current_user_can( 'delete_user', $id ). We however only support removing users from a site at the moment, which actually uses a different capabilityremove_users. We would need to add a check forcurrent_user_can( 'remove_user', $id )for multisite installs. Support for deletion from the entire network is a separate issue in #1922, that is not necessarily related with this issue.