Regression? Non-administrators are able to manage users with administrator capab

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Kevin Behrens

    (@kevinb)

    CME 1.5.2 added support for super administrators to manage users even if they’re not Administrators on the site. The problem is that on single site installations, WP equates the delete_users capability to is_super_admin(). So yes, non-Administrators with that capability could create Administrators in CME 1.5.2

    This issue is fixed in Capability Manager Enhanced 1.5.3.

    Thread Starter Technica Solutions Ltd

    (@technica-solutions)

    Many thanks.

    Things are now wWorking fine with CME 1.5.3.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Regression? Non-administrators are able to manage users with administrator capab’ is closed to new replies.