Wordpress

History

Felix Arntz 0f9dd5f88f REST API: Do not allow access to users from a different site in multisite. It has been unintendedly possible to both view and edit users from a different site than the current site in multisite environments. Moreover, when passing roles to a user in an update request, that user would implicitly be added to the current site. This changeset removes the incorrect behavior for now in order to be able to provide a proper REST API workflow for managing multisite users in the near future. Related unit tests have been adjusted as well. Props jnylen0, jeremyfelt, johnjamesjacoby. Fixes #39701. git-svn-id: https://develop.svn.wordpress.org/trunk@40106 602fd350-edb4-49c9-b593-d223f7449a82	2017-02-23 22:36:54 +00:00
..
phpunit	REST API: Do not allow access to users from a different site in multisite.	2017-02-23 22:36:54 +00:00
qunit	REST API: Include the `status` property in `view` context responses from the Posts endpoints.	2017-02-19 04:31:12 +00:00

Felix Arntz 0f9dd5f88f REST API: Do not allow access to users from a different site in multisite.

It has been unintendedly possible to both view and edit users from a different site than the current site in multisite environments. Moreover, when passing roles to a user in an update request, that user would implicitly be added to the current site.

This changeset removes the incorrect behavior for now in order to be able to provide a proper REST API workflow for managing multisite users in the near future. Related unit tests have been adjusted as well.

Props jnylen0, jeremyfelt, johnjamesjacoby.
Fixes #39701.


git-svn-id: https://develop.svn.wordpress.org/trunk@40106 602fd350-edb4-49c9-b593-d223f7449a82

2017-02-23 22:36:54 +00:00

phpunit REST API: Do not allow access to users from a different site in multisite. 2017-02-23 22:36:54 +00:00

qunit REST API: Include the status property in view context responses from the Posts endpoints. 2017-02-19 04:31:12 +00:00