Wordpress

Go to file

Felix Arntz 0f9dd5f88f REST API: Do not allow access to users from a different site in multisite.

It has been unintendedly possible to both view and edit users from a different site than the current site in multisite environments. Moreover, when passing roles to a user in an update request, that user would implicitly be added to the current site.

This changeset removes the incorrect behavior for now in order to be able to provide a proper REST API workflow for managing multisite users in the near future. Related unit tests have been adjusted as well.

Props jnylen0, jeremyfelt, johnjamesjacoby.
Fixes #39701.


git-svn-id: https://develop.svn.wordpress.org/trunk@40106 602fd350-edb4-49c9-b593-d223f7449a82

2017-02-23 22:36:54 +00:00

src

REST API: Do not allow access to users from a different site in multisite.

2017-02-23 22:36:54 +00:00

tests

REST API: Do not allow access to users from a different site in multisite.

2017-02-23 22:36:54 +00:00

tools/i18n

DOCS: Replace HTTP links with HTTPS.

2016-06-10 04:49:09 +00:00

.editorconfig

Use HTTPS URLs for codex.wordpress.org.