Fix default locked capabilities

This commit is contained in:
Champ Camba
2023-07-05 13:04:08 +08:00
parent 51a5b5ed66
commit 0a4551c0a5
+3 -2
View File
@@ -291,8 +291,9 @@ if ( ! class_exists( 'um\core\Secure' ) ) {
$settings['secure']['title'] = __( 'Secure', 'ultimate-member' );
$banned_admin_capabilities_options = array();
$default_locked_cap_options = array( 'manage_options', 'promote_users', 'level_10' );
foreach ( $this->banned_admin_capabilities as $i => $cap ) {
if ( in_array( $cap, array( 'manage_options', 'promote_users', 'level_10' ), true ) ) {
if ( in_array( $cap, $default_locked_cap_options, true ) ) {
continue;
}
$banned_admin_capabilities_options[ $cap ] = $cap;
@@ -329,7 +330,7 @@ if ( ! class_exists( 'um\core\Secure' ) ) {
'multi' => true,
'columns' => 2,
'options' => $banned_admin_capabilities_options,
'value' => UM()->options()->get( 'banned_capabilities' ) ? array_keys( UM()->options()->get( 'banned_capabilities' ) ) : array_keys( $banned_admin_capabilities_options ),
'value' => UM()->options()->get( 'banned_capabilities' ) ? array_keys( UM()->options()->get( 'banned_capabilities' ) ) : array_keys( $default_locked_cap_options ),
'label' => __( 'Banned Administrative Capabilities', 'ultimate-member' ),
'description' => __( 'All the above are default Administrator & Super Admin capabilities. When someone tries to inject capabilities to the Account, Profile & Register forms submission, it will be flagged with this option. The <strong>manage_options</strong>, <strong>promote_users</strong> &amp; <strong>level_10</strong> capabilities are locked to ensure no users will be created with these capabilities.', 'ultimate-member' ),
),