[wp-trac] [WordPress Trac] #33694: Capability missing for editing scheduled posts created by one self (implicit permission bypass)

WordPress Trac noreply at wordpress.org
Sun Nov 29 02:24:24 UTC 2015


#33694: Capability missing for editing scheduled posts created by one self
(implicit permission bypass)
-------------------------------------------------+-------------------------
 Reporter:  SimpleBugReporter                    |       Owner:
     Type:  defect (bug)                         |  johnbillion
 Priority:  normal                               |      Status:  closed
Component:  Role/Capability                      |   Milestone:  Awaiting
 Severity:  normal                               |  Review
 Keywords:  ux-feedback 2nd-opinion needs-patch  |     Version:  2.0
  needs-unit-tests                               |  Resolution:  fixed
                                                 |     Focuses:
                                                 |  administration
-------------------------------------------------+-------------------------
Changes (by johnbillion):

 * owner:   => johnbillion
 * status:  new => closed
 * resolution:   => fixed


Comment:

 In [changeset:"35747"]:
 {{{
 #!CommitTicketReference repository="" revision="35747"
 When a post is scheduled for publication, treat it the same as a published
 post when calculating the capabilities required to edit or delete it.

 Fixes #33694
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/33694#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list