Permission Problem on new editor

  • Hi,

    There is a major problem with capabilities. Only admin are built to add video or anything, yet the editors should too according to code. (They have brightcove_manipulate_videos cap)

    Editor cannot use their capabilities because of a bug in the Admin menu creation. includes/admin/class-bc-admin-menu.php:99

    It pass the current_user_id to the function get_account_details_for_user. When this function receive this param, it goes to the elseif that checked for a cap (brightcove_get_user_default_account) that editors do not have. It should not
    Rest of the code is built to use the default Account. This will NEVER happen, since the capability short circuit happens.

    Removal of the elseif makes this better. Else removing the parameter in includes/admin/class-bc-admin-menu.php:99 also helps.

    Other work around is to add capability to editor (brightcove_get_user_default_account)

    To reproduce:
    * Install plugin
    * Set the default Account via and admin
    * Create an editor
    * try to access Brightcove videos menu -> will not work.

  • The topic ‘Permission Problem on new editor’ is closed to new replies.