[wp-trac] [WordPress Trac] #3478: Title of private posts show up in dashboard

[WordPress Trac]

#3478: Title of private posts show up in dashboard
----------------------+-----------------------------------------------------
 Reporter:  McShelby  |       Owner:  anonymous
     Type:  defect    |      Status:  new      
 Priority:  normal    |   Milestone:  2.2      
Component:  Security  |     Version:  2.0.5    
 Severity:  major     |    Keywords:           
----------------------+-----------------------------------------------------
 When a user A logs in to Wordpress he cannot actually see the comments
 attached to a private post of some other user B, but he can see the title
 of the post on the Dashboard page. There's a link under "Latest Activity
 >> Comments" which shows the title of the private post which has recently
 had a comment attached to it. If user A clicks on the post title link, he
 correctly gets the 404 page. However the title of user B's private post
 was revealed.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/3478>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software