Changeset 2980 for sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-controls.php

Timestamp:

04/19/2016 08:03:45 PM (10 years ago)

Author:

obenland

Message:

Plugin Directory: Base post status access on user level.

Restricts plugin reviewers access to only set plugins to reviewed ('pending')
and doesn't let them publish a plugin. This will need more cap checks when
saving a plugin.

See #1570.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-controls.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-controls.php

@@ -37 +37 @@
 
                 // Bail if the current user can't review plugins.
-                if ( ! current_user_can( 'plugin_approve', $post ) ) {
+                if ( ! current_user_can( 'plugin_approve', $post ) && ! current_user_can( 'plugin_review', $post ) ) {
                         return;
                 }
 
-                $statuses = array( 'publish', 'pending', 'disabled', 'closed', 'rejected' );
+                $statuses = array( 'draft', 'pending' );
+                if ( current_user_can( 'plugin_approve', $post ) ) {
+                        $statuses = array_merge( $statuses, array( 'publish', 'disabled', 'closed', 'rejected' ) );
+                }
                 ?>
                 <div class="misc-pub-section misc-pub-plugin-status">