[wp-trac] [WordPress Trac] #16506: Links to private posts in the Recent Comments widget return 404 for logged out users

[WordPress Trac]

#16506: Links to private posts in the Recent Comments widget return 404 for logged
out users
--------------------------+-----------------------------
 Reporter:  designsimply  |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Widgets       |    Version:
 Severity:  normal        |   Keywords:  needs-patch
--------------------------+-----------------------------
 Expected: links shown in the recent comments widget to work for logged out
 users.

 Observed: links to private posts return 404 for logged out users.

 To reproduce:
 1. Open a !WordPress blog
 2. Go to Appearance -> Widgets and add the Recent Comments widget
 5. Create two posts and publish them: one private, one password-protected
 4. Leave comments on each post
 5. Go to Comments and make sure the new comments are approved
 6. Clear cache and cookies or use an incognito window to view the blog
 7. Result: Comments for both the password protected and the private post
 are visible in the Recent Comments widget. Clicking on the comment for the
 private post results in a 404 error. Clicking on the comment for the
 password-protected post results in asking for a password.

 Tested in WPCOM latest and WPORG [17426].

 I think it makes sense to leave comments for password-protected posts in
 the Recent Comments widget, but removing comments of private posts for
 users without rights to see them makes sense since they return a 404
 otherwise.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/16506>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software