Commit 9201a5eebd2 for woocommerce
commit 9201a5eebd261e8c0849c06ce1b4f00fb81830d3
Author: Michal Iwanow <4765119+mcliwanow@users.noreply.github.com>
Date: Wed Oct 7 12:42:25 2026 +0200
Require super admin for Blueprint import on multisite (#69522)
Co-authored-by: Ján Mikláš <470616+NeosinneR@users.noreply.github.com>
diff --git a/plugins/woocommerce/changelog/fix-blueprint-import-multisite b/plugins/woocommerce/changelog/fix-blueprint-import-multisite
new file mode 100644
index 00000000000..f34bbd73017
--- /dev/null
+++ b/plugins/woocommerce/changelog/fix-blueprint-import-multisite
@@ -0,0 +1,4 @@
+Significance: patch
+Type: fix
+
+Require network super admin rights to import Blueprints on multisite.
diff --git a/plugins/woocommerce/src/Admin/Features/Blueprint/RestApi.php b/plugins/woocommerce/src/Admin/Features/Blueprint/RestApi.php
index 31e277ff2df..97414cc7390 100644
--- a/plugins/woocommerce/src/Admin/Features/Blueprint/RestApi.php
+++ b/plugins/woocommerce/src/Admin/Features/Blueprint/RestApi.php
@@ -162,7 +162,9 @@ class RestApi {
public function check_import_permission() {
if (
! current_user_can( 'manage_woocommerce' ) ||
- ! current_user_can( 'manage_options' )
+ ! current_user_can( 'manage_options' ) ||
+ // Blueprint imports can change network-wide settings, so require super admin on multisite.
+ ( is_multisite() && ! is_super_admin() )
) {
return new \WP_Error( 'woocommerce_rest_cannot_view', __( 'Sorry, you cannot import WooCommerce Blueprints.', 'woocommerce' ), array( 'status' => rest_authorization_required_code() ) );
}