add_cap for editor but no admin role

Question

I want my editors to have the possibility, to add other users. I added:

    $edit_editor->add_cap('create_users');
$edit_editor->add_cap('delete_users');
$edit_editor->add_cap('edit_users');

to the functions.php - but now, the editors are also able to create, change an Admin Role.

Is there any way, to exclude admin from the roles?

Thank you!

AD

Answer 1

Giving the capability to delete and edit users would compromise your security, as then the editors would have the ability to modify your profile too. What you could do is just give the create_users capability to the editors. But the users thus created would be allotted "Subscribers" role by deafult.

EDIT: Try the following code ( Requires a bit of testing / sort of a hack for your requirement )

if ( isset( $_REQUEST['user_id'] ) ) {
    $userdata = get_user_by( 'id', $_REQUEST['user_id'] );
    if ( isset( $userdata->roles[0] ) && ( 'administrator' == $userdata->roles[0] ) ) {
        $edit_editor->remove_cap( 'create_users' );
        $edit_editor->remove_cap( 'delete_users' );
        $edit_editor->remove_cap( 'edit_users' );
    } else {
        $edit_editor->add_cap( 'create_users' );
        $edit_editor->add_cap( 'delete_users' );
        $edit_editor->add_cap( 'edit_users' );
    }
} else {
    $edit_editor->add_cap( 'create_users' );
    $edit_editor->add_cap( 'delete_users' );
    $edit_editor->add_cap( 'edit_users' );
}