Changeset 11744 for sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/api/routes/class-plugin-release-confirmation.php

Timestamp:

04/05/2022 05:14:18 AM (3 years ago)

Author:

dd32

Message:

Plugin Directory: Introduce specific capabilities for various actions, rather than just using "edit access".

See #5654.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/api/routes/class-plugin-release-confirmation.php (modified) (2 diffs)

sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/api/routes/class-plugin-release-confirmation.php

@@ -30 +30 @@
                 $plugin = Plugin_Directory::get_plugin_post( $request['plugin_slug'] );
 
-                return current_user_can( 'plugin_admin_edit', $plugin ) && 'publish' === $plugin->post_status;
+                return current_user_can( 'plugin_manage_releases', $plugin );
             },
         ] );
@@ -50 +50 @@
                 return (
                     Release_Confirmation_Shortcode::can_access() &&
-                    current_user_can( 'plugin_admin_edit', $plugin ) &&
-                    'publish' === $plugin->post_status
+                    current_user_can( 'plugin_manage_releases', $plugin )
                 );
             },