[wp-trac] [WordPress Trac] #23939: Wrong capability check in wp_ajax_replyto_comment

[WordPress Trac]

#23939: Wrong capability check in wp_ajax_replyto_comment
--------------------------+------------------------------
 Reporter:  fgauthier     |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Comments      |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |
--------------------------+------------------------------

Comment (by nacin):

 edit_post is proper here. The question is, can they edit the post to which
 they are posting a comment? Yes, they can. And because of that, they are
 allowed to reply from the admin. edit_comment would only make sense if we
 had a comment to check against. Here, we have a post to check against.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/23939#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software