Make WordPress Core

Opened 7 years ago

Last modified 6 months ago

#42486 assigned defect (bug)

The Tools screen is blank for users who cannot manage categories or tags

Reported by: johnbillion's profile johnbillion Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version: 4.9
Component: Administration Keywords: has-patch 2nd-opinion has-screenshots
Focuses: Cc:

Description

Since Press This was removed in #41689, the Tools screen is only composed of the Categories and Tags Converter.

For users who can't manage categories or tags (Authors and Contributors), the Tools screen is now completely empty. Subscribers currently don't see the Tools admin menu item.

The Tools admin menu item should be removed if there's nothing to display on it.

Attachments (10)

42486-menu.php.patch (1.1 KB) - added by janak007 7 years ago.
42486-tools.php.patch (856 bytes) - added by janak007 7 years ago.
42486.patch (2.8 KB) - added by janak007 7 years ago.
Merged file patch
42486.diff (1.2 KB) - added by dd32 7 years ago.
42486v2.diff (910 bytes) - added by seanchayes 7 years ago.
Refreshed patch and updated display logic based on the comments in this ticket
42486.3.diff (1.3 KB) - added by audrasjb 6 years ago.
Displays a message when tools.php screen is blank (also merging previous patch)
42486.4.diff (1.7 KB) - added by audrasjb 6 years ago.
Fixes toolbox action handling in tools.php
42486.5.diff (1.8 KB) - added by audrasjb 6 years ago.
Fixes inline comment message
42486.2.diff (2.6 KB) - added by desrosj 6 years ago.
tools page for editor author contributor.png (95.8 KB) - added by afercia 5 years ago.

Download all attachments as: .zip

Change History (55)

#1 @janak007
7 years ago

  • Keywords has-patch added; needs-patch removed

This would need workaround in two files.
1) menu.php for hiding the tools from admin menu.
2) tools.php for preventing users to access the page from by entering direct URL.

I have added patch for two files. After applying these patches only user with import capability can access to tools page.

#2 @ocean90
7 years ago

  • Version changed from trunk to 4.9

@janak007
7 years ago

Merged file patch

#3 @johnbillion
7 years ago

  • Milestone changed from 4.9.1 to 4.9.2

@dd32
7 years ago

#4 @dd32
7 years ago

A use-case to consider here is when a plugin has added something to the tools page, such as the press this plugin.

I don't think we need to worry about blocking direct access to the page.

The attachments so far on this ticket don't really seem like good solutions, consider these use-cases:

  • User can't import, but can export
  • User can't export, but can import
  • Multisite network has Import/Export disabled, but can access Delete Site
  • Plugin has added submenus to the Tools menu
  • A plugin is adding extra things on the tools page.

To fix this, it's going to need to be some code in wp-admin/includes/menu.php around line 180 which checks that

  • Tools.php doesn't have any sub child nodes
  • !has_action( 'tool_box' ) (to detect custom output on that page) and only then remove the menu from the menu.

42486.diff does just this, and I think this covers enough of the edge cases here.
As mentioned in the patch, it's still possible to hit a blank page when the user can import, but can't modify tags/cats, the menu will have subpages of importers/etc in that case.
Maybe we could increase the amount of text on the page, showing a description of the page & a "Sorry, nothing you can access right now" message when no tools on offer?

#5 @dd32
7 years ago

  • Milestone changed from 4.9.2 to 4.9.3

Bumping to 4.9.3 due to 4.9.2s release

This ticket was mentioned in Slack in #core by desrosj. View the logs.


7 years ago

#7 @desrosj
7 years ago

  • Keywords needs-testing needs-refresh added

This ticket was mentioned in Slack in #core by desrosj. View the logs.


7 years ago

#9 @desrosj
7 years ago

  • Milestone changed from 4.9.3 to 4.9.4

Punting to 4.9.4.

#10 @seanchayes
7 years ago

I refreshed the patch and added the same logic from wp-admin/tools.php to help determine if the Tools menu needs to be displayed.

So, if something adds an action to tool_box, there's some entries for the Tools menu and the current user can manage default taxonomies the Tools menu will be shown.

For testing, I set up some local users - a subscriber, an author and an editor and added a function to a child theme (which could just as well have been a plugin) that added something to the tool_box action.

For each user, and while the added function was in place, the Tools menu displayed. As soon as I removed the function then regardless of non-admin user the Tools menu was hidden.

I couldn't think of any worthwhile text to display on at the wp-admin/tools.php page when it is empty and no submenu items are displayed and nothing is hooked into tool_box so it just shows the Tools heading if you go there directly and are not an admin or with the capabilities tested for.

42486v2.diff is the patch with these changes.

@seanchayes
7 years ago

Refreshed patch and updated display logic based on the comments in this ticket

#11 @chetan200891
6 years ago

I have tested 42486v2.diff

I have created Test Author, it hides Tools menu from Dashboard. But allows access tools.php by entering URL.

#12 @dd32
6 years ago

  • Milestone changed from 4.9.4 to 4.9.5

Bumping, 4.9.4 has been released.

#13 @ketanumretiya030
6 years ago

  • Keywords needs-patch added; has-patch removed

Hi,

I have test with All wordpress user role..

Editor,Contributor,Author
Tools menu visible and open tools.php file with blank admin Page.

Administrator : Display below message in admin tools.php when click on Tools menu
Categories and Tags Converter

If you want to convert your categories to tags (or vice versa), use the Categories and Tags Converter available from the Import screen.

Subscriber : Hide tool menu

Last edited 6 years ago by ketanumretiya030 (previous) (diff)

#14 @audrasjb
6 years ago

  • Keywords has-patch added; needs-testing needs-refresh needs-patch removed

Hello,

Here is a new patch with a message displayed for users coming from tools.php URL. This is displayed only to avoid blank screen in any case. It applies to editor, author and contributor roles or any custom role without import capabilities.

Cheers,
Jb

@audrasjb
6 years ago

Displays a message when tools.php screen is blank (also merging previous patch)

#15 @audrasjb
6 years ago

Ow sorry, I forgot to manage toolbox actions (like in previous patch).
Here is a new attempt.

@audrasjb
6 years ago

Fixes toolbox action handling in tools.php

@audrasjb
6 years ago

Fixes inline comment message

This ticket was mentioned in Slack in #core by audrasjb. View the logs.


6 years ago

#17 @audrasjb
6 years ago

  • Keywords 2nd-opinion added

This ticket was mentioned in Slack in #core by danieltj. View the logs.


6 years ago

#19 @audrasjb
6 years ago

@desrosj @johnbillion @dd32
Are your OK to ship the last patch in 4.9.5?

Many thanks for your feedback!
Cheers,
Jb

This ticket was mentioned in Slack in #core by audrasjb. View the logs.


6 years ago

#21 @audrasjb
6 years ago

  • Milestone changed from 4.9.5 to 4.9.6

Bumping to 4.9.6 due to 4.9.5 beta release.

This ticket was mentioned in Slack in #core by desrosj. View the logs.


6 years ago

#23 @desrosj
6 years ago

  • Owner set to desrosj
  • Status changed from new to assigned

#24 @desrosj
6 years ago

I am not sure that I like the idea of copying an existing code block (that checks if the current user has the capability to manage categories or tags) into two different locations.

I think moving the Categories and Tags converter to the action hook would be a better approach. Using this approach would only require the original code proposed in 42486.diff. It would also allow that card to be unhooked from the tools page, if desired.

@desrosj
6 years ago

#25 @desrosj
6 years ago

42486.2.diff is a patch with the approach I talked about above.

  • The Categories and Tags Converter card is moved into a function.
  • That function is attached to the tool_box hook at priority 1.

The new function definitely does not belong in the wp-admin/includes/menu.php file, but I am not sure where the best place to put it is. Also, there could probably be a better name for the function too.

This ticket was mentioned in Slack in #core by desrosj. View the logs.


6 years ago

This ticket was mentioned in Slack in #core by desrosj. View the logs.


6 years ago

#28 @desrosj
6 years ago

  • Milestone changed from 4.9.6 to 4.9.7

Punting due to lack of 2nd opinion.

#29 @desrosj
6 years ago

  • Milestone changed from 4.9.7 to 4.9.8

Moving all tickets in 4.9.7 to 4.9.8.

This ticket was mentioned in Slack in #gdpr-compliance by desrosj. View the logs.


6 years ago

#31 @pento
6 years ago

  • Milestone changed from 4.9.8 to Awaiting Review

Patch needs reviewing before milestoning.

This ticket was mentioned in Slack in #core by pbiron. View the logs.


6 years ago

#33 @afercia
5 years ago

In the screenshot attached below, Tools page for users with role Editor, Author, and Contributor on current trunk 5.2.

Actually, the items in the admin menu may change based on the role. The point is this page is completely blank and not so nice to see.

Last edited 5 years ago by afercia (previous) (diff)

#34 @afercia
5 years ago

  • Keywords has-screenshots added

This ticket was mentioned in Slack in #polyglots by ocean90. View the logs.


5 years ago

#36 @desrosj
4 years ago

  • Owner desrosj deleted

This ticket was mentioned in Slack in #core-multisite by johnbillion. View the logs.


4 years ago

#38 @Clorith
4 years ago

So, what about expanding the terminology of "Tools" to make this page hold value for a wider array of users?

As an author (or any users unable to install something), a tool for me might be knowledge of how to use something specific in WP-admin. Sure there's the help tab in the top right corner for some pages, but that doesn't exist in the editor (although it does have a link that takes you to a WordPress.org article), or in the customizer (the small question mark with a short text)? Could a tool for these users be something simple like a link to a few curated articles on WordPress.org, as a way to provide value to a page that may otherwise end up blank?

In network admin, this could also exist to provide articles on managing a network.

There are other things the tools section could do, like a curated list of plugins, for those with access to them, but I think that's a different ticket altogether.

#39 @paaljoachim
2 years ago

I see that this ticket has stalled.
Should the top level Tools item just be hidden for now for user roles that only see the Tools title and a blank page until additional uses for the Tools screen can be tackled?

This ticket was mentioned in Slack in #core by paaljoachim. View the logs.


2 years ago

#41 @ehau
2 years ago

Yes, I think completely empty menus should not be displayed to the user.

#42 @sebastienserre
16 months ago

I agree with others, this tools page shouldn't be shown to not allowed user role.

#43 @ocean90
12 months ago

#59107 was marked as a duplicate.

#44 @sabernhardt
6 months ago

#60275 was marked as a duplicate.

#45 @blackstar1991
6 months ago

Will anyone delete this bug? We already have Version 6.4.2, but this problem still persists

Note: See TracTickets for help on using tickets.