[wp-trac] [WordPress Trac] #17850: XMLRPC API Clients can't edit underscore-prefixed custom fields

[WordPress Trac]

#17850: XMLRPC API Clients can't edit underscore-prefixed custom fields
------------------------------+--------------------
 Reporter:  redsweater        |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  3.1.4
Component:  General           |     Version:  3.1.3
 Severity:  normal            |  Resolution:
 Keywords:  mobile has-patch  |
------------------------------+--------------------

Comment (by ryan):

 To do this right I think we need register_meta() API that allows
 registering sanitize and auth callbacks.  Then use
 current_user_can('edit_post_meta', $meta_key, $post_id).  edit_post_meta
 would be a meta cap that checks the edit_post cap and also checks for an
 auth callback for the particular meta key.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/17850#comment:17>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software