[wp-trac] [WordPress Trac] #38958: REST API: Capability check for creating terms differs from wp-admin

WordPress Trac noreply at wordpress.org
Sat Nov 26 22:28:30 UTC 2016


#38958: REST API: Capability check for creating terms differs from wp-admin
--------------------------+------------------------------------------
 Reporter:  johnbillion   |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  4.8
Component:  Taxonomy      |    Version:  trunk
 Severity:  normal        |   Keywords:  needs-patch needs-unit-tests
  Focuses:  rest-api      |
--------------------------+------------------------------------------
 The capability check used in `WP_REST_Terms_Controller` when attempting to
 create a new term is `manage_terms`, but it should be `edit_terms`.

 Refs:

 * https://core.trac.wordpress.org/browser/trunk/src/wp-admin/edit-
 tags.php?rev=39308&marks=74#L70
 * https://core.trac.wordpress.org/browser/trunk/src/wp-admin/edit-
 tags.php?rev=39308&marks=322#L320

 In #33975 we'll hopefully change this to `create_terms`.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/38958>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list