Felix Arntz eb8457d3f4 REST API: Do not allow access to users from a different site in multisite. ... It has been unintendedly possible to both view and edit users from a different site than the current site in multisite environments. Moreover, when passing roles to a user in an update request, that user would implicitly be added to the current site. This changeset removes the incorrect behavior for now in order to be able to provide a proper REST API workflow for managing multisite users in the near future. Related unit tests have been adjusted as well. Props jnylen0, jeremyfelt, johnjamesjacoby. Fixes #39701. Built from https://develop.svn.wordpress.org/trunk@40106 git-svn-id: http://core.svn.wordpress.org/trunk@40043 1a063a9b-81f0-0310-95a4-ce76da25c4cd		2017-02-23 22:37:44 +00:00
..
class-wp-rest-attachments-controller.php	Docs: Correct rest_insert_* duplicate hook references in REST API.	2017-01-04 13:23:40 +00:00
class-wp-rest-comments-controller.php	REST API: Unify object access handling for simplicity.	2017-01-26 13:39:41 +00:00
class-wp-rest-controller.php	REST API: Remove rest_get_post filter and get_post abstraction.	2016-11-08 13:09:33 +00:00
class-wp-rest-post-statuses-controller.php	REST API: Unify object access handling for simplicity.	2017-01-26 13:39:41 +00:00
class-wp-rest-post-types-controller.php	REST API: Unify object access handling for simplicity.	2017-01-26 13:39:41 +00:00
class-wp-rest-posts-controller.php	REST API: Fix multiple issues with setting dates of posts and comments.	2017-02-21 18:18:45 +00:00
class-wp-rest-revisions-controller.php	REST API: Cast revision author ID to int.	2017-02-16 20:09:45 +00:00
class-wp-rest-settings-controller.php	Docs: Misc corrections and additions to inline documentation.	2016-12-27 09:28:40 +00:00
class-wp-rest-taxonomies-controller.php	REST API: Unify object access handling for simplicity.	2017-01-26 13:39:41 +00:00
class-wp-rest-terms-controller.php	REST API: Unify object access handling for simplicity.	2017-01-26 13:39:41 +00:00
class-wp-rest-users-controller.php	REST API: Do not allow access to users from a different site in multisite.	2017-02-23 22:37:44 +00:00