[wp-trac] [WordPress Trac] #13425: Image Gallery of Private Post is publicly displayed

[WordPress Trac]

#13425: Image Gallery of Private Post is publicly displayed
------------------------------------+-----------------------------
 Reporter:  hakre                   |       Owner:
     Type:  defect (bug)            |      Status:  reopened
 Priority:  normal                  |   Milestone:  Future Release
Component:  Gallery                 |     Version:  3.0
 Severity:  normal                  |  Resolution:
 Keywords:  has-patch dev-feedback  |     Focuses:
------------------------------------+-----------------------------

Comment (by joemcgill):

 I just ran into this issue. It seems like the main problem is that even
 though the images themselves are not private, WordPress still treats the
 attachment page as a private post if the post it is attached to is set as
 private—resulting in users seeing a 404 error when they visit the
 attachment page. Detaching the image from the private post resolves the
 404 issue.

 I'm not sure if there is a good reason for attachment pages to inherit the
 privacy of the page it is attached to or not, since viewing the image
 itself is not subject to any capabilities check, but if not, we should
 attempt resolving the 404 issue.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/13425#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform