EXP-002 — QuantumDev WordPress Lab
Generated: 2026-08-17T08:14:12Z
Environment: https://lab.quantumdev.fr

Ability permission evidence (source inspection; no permission bypass attempted).

core/get-site-info	DEMONTRÉ	current_user_can(manage_options)	wp-includes/abilities.php:119-121
core/get-user-info	DEMONTRÉ	is_user_logged_in()	wp-includes/abilities.php:185-187
core/get-environment-info	DEMONTRÉ	current_user_can(manage_options)	wp-includes/abilities.php:247-249
core/read-settings	DEMONTRÉ	current_user_can(manage_options)	wp-content/plugins/ai/includes/Abilities/Settings/Settings.php:147,206-208
core/read-users	DEMONTRÉ	is_user_logged_in(); list_users/edit_user conditional checks	wp-content/plugins/ai/includes/Abilities/Users/Users.php:135,160-168,445-446
core/read-content	DEMONTRÉ	is_user_logged_in(); read/edit capability checks	wp-content/plugins/ai/includes/Abilities/Content/Content.php:211,242-286
ai/get-post-details	DEMONTRÉ	plugin permission_callback; current_user_can(edit_post)	wp-content/plugins/ai/includes/Abilities/Utilities/Posts.php:170,349-359
ai/get-post-terms	DEMONTRÉ	plugin permission_callback; current_user_can(edit_post)	wp-content/plugins/ai/includes/Abilities/Utilities/Posts.php:330,349-359

All eight registered objects expose a permission callback in the inspected registration/source paths.