[wp-trac] [WordPress Trac] #13425: Image Gallery of Private Post is publicly displayed

[WordPress Trac]

#13425: Image Gallery of Private Post is publicly displayed
--------------------------+-------------------------------------------------
 Reporter:  hakre         |       Owner:            
     Type:  defect (bug)  |      Status:  new       
 Priority:  normal        |   Milestone:  Unassigned
Component:  General       |     Version:  3.0       
 Severity:  normal        |    Keywords:            
--------------------------+-------------------------------------------------
 Might have been forgotten only, I just ran over this inconsistency while
 beta-testing:

 '''Description:'''

 The Image Gallery of a Private Post is displayed (in another post via the
 Shorttag with id parameter) whereas, when clicking on the images to go to
 the attachment page, you get a 404 not found.

 '''Example:'''

 [http://hakre.wordpress.com/2010/05/17/cui-utils-rev2/#more-1184 Post with
 Gallery][[BR]]
 [http://hakre.wordpress.com/2010/05/17/cui-utils-gnu-tools-fur-
 windows-32-with-a-simple-setup/gnu-win-cui-util-00-setup/ Attachment of
 that Gallery]

 '''Steps to reproduce'''

 Create a new Post, set a title and the Status to private.

 Save as Draft.

 Preview it, to get the ID easily from URL.

 Upload a Bunch of Images.

 Insert the Gallery Shorttag inside that Post Body.

 Publish the Post.

 Create a second new Post

 Give it a Title and Insert the Gallery Shortcode with the ID from the last
 Post.

 Publish.

 View.

 Copy the URL.

 Open another Browser so to have a new User-Session.

 Visit that URL.

 '''Expected Behaviour'''

 You should not see a gallery.

 '''Behaviour'''

 You see a gallery.

 When clicking on a gallery link you get a 404 page.


 '''Feedback'''

 I see an inconsitency here but have no Idea how to deal with it.

 So either the gallery should not be found as well (not found as in 404 but
 in this case: not output) or the attachment pages should be able to call
 as well.

 Related: #11697

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/13425>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software