To prevent subscriber-level roles from accessing the welcome page or seeing the dashboard widget/notices, some basic capability checks are added to gate it.
Capability check of 'edit_posts' for the welcome page (aka contributor)
Capability check of 'edit_posts' for widget and notices (aka contributor) - but this one runs through a new filter so that users can edit this if they choose.
Notices are now wrapped in a new method that runs one init so that the capability checks can function after current_user is set.
To prevent subscriber-level roles from accessing the welcome page or seeing the dashboard widget/notices, some basic capability checks are added to gate it.
initso that the capability checks can function after current_user is set.Fixes: #531