MultiSite Capability – not as FAQ describes

The FAQ states the following:
“When running this plugin on a WordPress Multisite installation, it will only be loaded and visible for Network admins. “

I’m glad I tested it, because it looks like standard Site Administrators also have access. I dug into the code, and found the following:

$cap = apply_filters( ‘bsr_capability’, ‘manage_options’ );

(and the plugin itself doesn’t filter it)

The default capability is ‘manage_options’. On MultiSite, standard Site Administrators also have this capability. A reasonable fix might be to check if MultiSite. If so, use ‘manage_network_options’ as the capability, and use ‘manage_options’ for single-site installs.