[wp-trac] [WordPress Trac] #38816: REST API: logic error in comments post ID
WordPress Trac
noreply at wordpress.org
Thu Nov 17 03:01:04 UTC 2016
#38816: REST API: logic error in comments post ID
----------------------------------------+-----------------------
Reporter: dd32 | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 4.7
Component: Comments | Version:
Severity: normal | Resolution:
Keywords: has-patch needs-unit-tests | Focuses: rest-api
----------------------------------------+-----------------------
Comment (by dd32):
> I don't think this is a permissions issue, so it shouldn't be addressed
in the permission_callback
It can go both ways, the user doesn't have permission to add a comment to
something that doesn't exist, but the user also should not be able to add
a post to something that doesn't exist.
I'd err on the side of permissions myself.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/38816#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list