[wp-trac] [WordPress Trac] #38816: REST API: logic error in comments post ID

WordPress Trac noreply at wordpress.org
Thu Nov 17 03:01:04 UTC 2016


#38816: REST API: logic error in comments post ID
----------------------------------------+-----------------------
 Reporter:  dd32                        |       Owner:
     Type:  defect (bug)                |      Status:  new
 Priority:  normal                      |   Milestone:  4.7
Component:  Comments                    |     Version:
 Severity:  normal                      |  Resolution:
 Keywords:  has-patch needs-unit-tests  |     Focuses:  rest-api
----------------------------------------+-----------------------

Comment (by dd32):

 > I don't think this is a permissions issue, so it shouldn't be addressed
 in the permission_callback

 It can go both ways, the user doesn't have permission to add a comment to
 something that doesn't exist, but the user also should not be able to add
 a post to something that doesn't exist.

 I'd err on the side of permissions myself.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/38816#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list