[wp-trac] [WordPress Trac] #17981: XML-RPC wp.getComments should work for non-admins

WordPress Trac wp-trac at lists.automattic.com
Wed Feb 8 12:30:11 UTC 2012


#17981: XML-RPC wp.getComments should work for non-admins
------------------------------+------------------------------
 Reporter:  koke              |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  Awaiting Review
Component:  XML-RPC           |     Version:  3.2
 Severity:  normal            |  Resolution:
 Keywords:  mobile has-patch  |
------------------------------+------------------------------

Comment (by koke):

 Added a new patch (sorry about the wrong one). Tested with an Author user:

 * wp.getComments shows every comment (as dashboard does)
 * Added a new field 'can_edit' to show if the user has permission to
 edit/delete that specific comment. That'll allow to customize the UI for
 it
 * Can edit/delete comments in own posts
 * Can't edit/delete comments in others posts

 I think this also solves #19916. Some questions about it:

 * Should wp.deleteComment error be "You are not allowed to delete..."
 instead of moderate?
 * I was going to change the error in wp.getComments to match
 wp.getComment, but it's a different error code (401 and 403) and could
 break something

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/17981#comment:9>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list