[wp-trac] [WordPress Trac] #22415: media-upload.php should check whether current user can edit a particular post type

[WordPress Trac]

#22415: media-upload.php should check whether current user can edit a particular
post type
-------------------------------+------------------------------
 Reporter:  danielbachhuber    |       Owner:
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  Role/Capability    |     Version:
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |
-------------------------------+------------------------------

Comment (by nacin):

 It would make more sense to leverage map_meta_cap in the plugin, since
 that's how we control permissions for authors.

 If this code ran through map_meta_cap(), everything should work just fine.
 user_has_cap is a fairly powerful hook as well, but when you're dealing
 with meta caps, you really need to go through map_meta_cap for the bulk of
 it.

 In short, I don't see a bug here. For some unit tests on how edit_post and
 $post_type->cap->edit_post are the same, see http://unit-
 tests.trac.wordpress.org/browser/trunk/tests/user/mapMetaCap.php.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/22415#comment:3>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software