[wp-trac] [WordPress Trac] #16714: Introduce capabilities for adding new posts

[WordPress Trac]

#16714: Introduce capabilities for adding new posts
----------------------------------------+-----------------------
 Reporter:  nacin                       |       Owner:  casben79
     Type:  task (blessed)              |      Status:  reopened
 Priority:  normal                      |   Milestone:  3.5
Component:  Role/Capability             |     Version:
 Severity:  normal                      |  Resolution:
 Keywords:  needs-docs has-patch close  |
----------------------------------------+-----------------------

Comment (by nacin):

 After all that, we should probably do [attachment:16714.12.diff]... It's
 not actually necessary because the current cap checks for upload.php (the
 list table) and the menu items all use upload_files. Only
 media.php?action=edit&attachment_id= and post.php?action=edit&post= are
 accessible without upload_files, and not directly through the UI (best I
 can tell), as long as you can edit that attachment using the standard
 edit_post cap tree.

 In that case, we do an upload_files check on media.php for "Add New". We
 don't for post.php — that was the point of create_posts. So,
 [attachment:16714.12.diff].

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/16714#comment:48>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software