I set up a author user on a sub site and noticed that they can access the Pro Sites upgrade page for the site. Shouldn't this only be limited to Administrators?
I looked in the code and noticed that it's giving permission if current_user_can edit_pages. Why is this not set to manage_options or something that only an administrator can do?
I changed it for my site but even in the notes is says //check for admin permissions for this blog.