Sitewide Roles and Capabilities

Hi all,

I have a following scenario:

For our Site-Network we need to have two roles of network-admins: a normal superadmin and supportadmin, who has still have sitewide capabilities, but just a little less, than a superadmin. For example he shouldn’t be able to delete, deactivate or archive sites…

Some of the needed functionalty has allready been added in 3.0 Beta 1 through the capabilities like: manage_sites, manage_network_users and manage_network_options. This is pretty awesome, the only problem is, that the manage_sites capability is just to powerful!

It would be very helpful to either divide the capability in to smaller once, like delete_site, archive_site, mark_site_as_spam. Or just add extra hooks in the wp-admin/ms-edit.php everytime after the current_user_can('manage_sites') check, so that the plugin-developers could implement their owen routine to check for the custom capabilities. For example:

if ( ! current_user_can('delete_sites')){
wp_die(__('You are not allowed to delete Sites!!!'));}

For the function above we would need a hook around line 309, something like: do_action( 'before_delete_site');

I think this would be very helpful to a lot of people and allow much greater control over sitewide user roles.

Thanks a lot and let me now what you think!