From 30eae8ee5c91b9e43d53eee432fb02f86f33aeba Mon Sep 17 00:00:00 2001
From: Peter Westwood <westi@git.wordpress.org>
Date: Mon, 13 Dec 2010 12:08:27 +0000
Subject: [PATCH] Add cap checks. do the action in php. See #15793

git-svn-id: https://develop.svn.wordpress.org/trunk@16892 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/network/site-users.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/wp-admin/network/site-users.php b/wp-admin/network/site-users.php
index d610679858..158790406c 100644
--- a/wp-admin/network/site-users.php
+++ b/wp-admin/network/site-users.php
@@ -215,9 +215,9 @@ endif; ?>
 
 </form>
 
-do_action( 'network_site_users_after_list_table', '' );
+<?php do_action( 'network_site_users_after_list_table', '' );?>
 
-<?php if ( apply_filters( 'show_network_site_users_add_existing_form', true ) ) : ?>
+<?php if ( current_user_can( 'promote_users' ) && apply_filters( 'show_network_site_users_add_existing_form', true ) ) : ?>
 <h3 id="add-existing-user"><?php _e('Add Existing User') ?></h3>
 <p><?php _e( 'Enter the username of an existing user on this network.' ) ?></p>
 <form action="site-users.php?action=adduser" id="adduser" method="post">
@@ -247,7 +247,7 @@ do_action( 'network_site_users_after_list_table', '' );
 </form>
 <?php endif; ?>
 
-<?php if ( apply_filters( 'show_network_site_users_add_new_form', true ) ) : ?>
+<?php if (  current_user_can( 'create_users' ) && apply_filters( 'show_network_site_users_add_new_form', true ) ) : ?>
 <h3 id="add-new-user"><?php _e('Create New User') ?></h3>
 <p><?php _e( 'Create a brand new user and add it to this site.' ) ?></p>
 <form action="<?php echo network_admin_url('site-users.php?action=newuser'); ?>" id="newuser" method="post">