[wp-trac] [WordPress Trac] #15326: Always check capabilites in admin pages

WordPress Trac wp-trac at lists.automattic.com
Mon Dec 6 08:06:48 UTC 2010


#15326: Always check capabilites in admin pages
-------------------------+--------------------------------------------------
 Reporter:  westi        |       Owner:  westi
     Type:  enhancement  |      Status:  new  
 Priority:  high         |   Milestone:  3.1  
Component:  Security     |     Version:  3.1  
 Severity:  normal       |    Keywords:       
-------------------------+--------------------------------------------------

Comment(by westi):

 I don't like the {{{current_user_can( $wp_list_table->cap())}}} because it
 still hides away the required cap in a lot of cases.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/15326#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list