[wp-trac] [WordPress Trac] #33694: Capability missing for editing scheduled posts created by one self (implicit permission bypass)

WordPress Trac noreply at wordpress.org
Thu Feb 18 20:16:39 UTC 2016


#33694: Capability missing for editing scheduled posts created by one self
(implicit permission bypass)
-------------------------------------------------+-------------------------
 Reporter:  SimpleBugReporter                    |       Owner:
     Type:  defect (bug)                         |  johnbillion
 Priority:  normal                               |      Status:  closed
Component:  Role/Capability                      |   Milestone:  4.4
 Severity:  normal                               |     Version:  2.0
 Keywords:  ux-feedback 2nd-opinion needs-patch  |  Resolution:  fixed
  needs-unit-tests                               |     Focuses:
                                                 |  administration
-------------------------------------------------+-------------------------

Comment (by DrewAPicture):

 Hi @shellghost, you can still modify this behavior using the
 [https://developer.wordpress.org/reference/hooks/map_meta_cap/
 map_meta_cap] filter to adjust caps based on the status of the passed
 object and the role of the current user.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/33694#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list