Changeset 2980

Timestamp:

04/19/2016 08:03:45 PM (9 years ago)

Author:

obenland

Message:

Plugin Directory: Base post status access on user level.

Restricts plugin reviewers access to only set plugins to reviewed ('pending')
and doesn't let them publish a plugin. This will need more cap checks when
saving a plugin.

See #1570.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-controls.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-controls.php

@@ -37 +37 @@
 
         // Bail if the current user can't review plugins.
-        if ( ! current_user_can( 'plugin_approve', $post ) ) {
+        if ( ! current_user_can( 'plugin_approve', $post ) && ! current_user_can( 'plugin_review', $post ) ) {
             return;
         }
 
-        $statuses = array( 'publish', 'pending', 'disabled', 'closed', 'rejected' );
+        $statuses = array( 'draft', 'pending' );
+        if ( current_user_can( 'plugin_approve', $post ) ) {
+            $statuses = array_merge( $statuses, array( 'publish', 'disabled', 'closed', 'rejected' ) );
+        }
         ?>
         <div class="misc-pub-section misc-pub-plugin-status">