WP-API / WP-API

		$this->assertArrayNotHasKey( 'administrator', $user->caps );

	}

	public function test_update_user_role_invalid_privilege_escalation() {

		wp_set_current_user( $this->editor );

		$request = new WP_REST_Request( 'PUT', sprintf( '/wp/v2/users/%d', $this->editor ) );

		$request->set_param( 'roles', array( 'administrator' ) );

		$response = $this->server->dispatch( $request );

		$this->assertErrorResponse( 'rest_cannot_edit_roles', $response, 403 );

		$user = get_userdata( $this->editor );

		$this->assertArrayHasKey( 'editor', $user->caps );

		$this->assertArrayNotHasKey( 'administrator', $user->caps );

	}

	public function test_update_user_role_invalid_privilege_deescalation() {

		if ( is_multisite() ) {

	}

	public function test_update_user_role_invalid_role() {

		wp_set_current_user( $this->user );

		$this->allow_user_to_manage_multisite();

		$request = new WP_REST_Request( 'PUT', sprintf( '/wp/v2/users/%d', $this->editor ) );

		$request->set_param( 'roles', array( 'BeSharp' ) );

		$response = $this->server->dispatch( $request );

		$this->assertErrorResponse( 'rest_user_invalid_role', $response, 400 );

		$user = get_userdata( $this->editor );

		$this->assertArrayHasKey( 'editor', $user->caps );

		$this->assertArrayNotHasKey( 'BeSharp', $user->caps );

	}

	public function test_update_user_without_permission() {

		wp_set_current_user( $this->editor );