Hot answers tagged user-roles
The problem is that the default Editor role does not have enough capabilities to change theme options. You are allowing users with 'moderate_comments' capabilities to view the page. That in itself is not enough. When the user attempts to update, it fails because the user does not have the proper capabilities, hence the 'Cheatin’ uh?' message. I believe you ...
From Codex : Do not pass a role name to current_user_can(), as this is not guaranteed to work correctly (see #22624) Instead, you may wish to try the check user role function put together by AppThemes. I would propose to use is_user_logged_in() to check your function.
Create an admin level user for your client, preferably not one named "admin". If you track the number of attempted hacks on your site you will notice that most try to use the "admin" username. Change the email for the admin use to reflect your client's email address Or, preferably, delete the "admin" user and create another one with a less guessable name.
Only top voted, non community-wiki answers of a minimum length are eligible