[wp-trac] [WordPress Trac] #15276: Ability to change/delete any post's meta if current user can edit any post.

WordPress Trac wp-trac at lists.automattic.com
Mon Dec 20 12:38:25 UTC 2010


#15276: Ability to change/delete any post's meta if current user can edit any post.
--------------------------+---------------------
 Reporter:  karevn        |       Owner:  ryan
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  3.1
Component:  Security      |     Version:  3.0.1
 Severity:  normal        |  Resolution:  fixed
 Keywords:  has-patch     |
--------------------------+---------------------
Changes (by ryan):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 (In [17078]) Restrict meta update/delete to the current post. Props
 kawauso. fixes #15276

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/15276#comment:5>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list