Take a role like Subscriber which only has read capability.
Adding list_users to an account with a Subscriber role allows the Users admin menu to appear, and the Guest Authors list page to be accessed.
However, clicking on the Add New button won't work, as they haven't got permission to edit this post type.
Allowing edit_posts capability allows the Add New screen to be accessed; currently the list_authors capability is used on the handling of the guest author creation.
Fixes #1001.
Before
Button visible, but clicking through leads to a cap check failure.
After
Button not visible. Trying to accessing the page directly through URL manipulation will still give the cap check failure.
Description
readcapability.list_usersto an account with a Subscriber role allows the Users admin menu to appear, and the Guest Authors list page to be accessed.edit_postscapability allows the Add New screen to be accessed; currently thelist_authorscapability is used on the handling of the guest author creation.Fixes #1001.
Before
Button visible, but clicking through leads to a cap check failure.
After
Button not visible. Trying to accessing the page directly through URL manipulation will still give the cap check failure.