{"action":"opened","issue":{"url":"https://api.github.com/repos/Ipstenu/varnish-http-purge/issues/27","repository_url":"https://api.github.com/repos/Ipstenu/varnish-http-purge","labels_url":"https://api.github.com/repos/Ipstenu/varnish-http-purge/issues/27/labels{/name}","comments_url":"https://api.github.com/repos/Ipstenu/varnish-http-purge/issues/27/comments","events_url":"https://api.github.com/repos/Ipstenu/varnish-http-purge/issues/27/events","html_url":"https://github.com/Ipstenu/varnish-http-purge/issues/27","id":190280007,"number":27,"title":"Multisite: Currently all users can purge varnish","user":{"login":"phh","id":1304003,"avatar_url":"https://avatars.githubusercontent.com/u/1304003?v=3","gravatar_id":"","url":"https://api.github.com/users/phh","html_url":"https://github.com/phh","followers_url":"https://api.github.com/users/phh/followers","following_url":"https://api.github.com/users/phh/following{/other_user}","gists_url":"https://api.github.com/users/phh/gists{/gist_id}","starred_url":"https://api.github.com/users/phh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phh/subscriptions","organizations_url":"https://api.github.com/users/phh/orgs","repos_url":"https://api.github.com/users/phh/repos","events_url":"https://api.github.com/users/phh/events{/privacy}","received_events_url":"https://api.github.com/users/phh/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-11-18T10:03:31Z","updated_at":"2016-11-18T10:03:31Z","closed_at":null,"body":"This check:\r\n\r\n```\r\n// Multisite - Site admins can purge UNLESS it's a subfolder install and we're on site #1\r\nis_multisite() && !current_user_can('manage_network')```\r\n\r\nIs checking if its a multisite installation and the current user does not have the `manage_network` capability - meaning pretty much all users meaning that contributors are able to make purges. I think the check should be something like:\r\n\r\n`current_user_can('manage_options')` ?"}}
{"actor":{"display_login":"phh"}}