[wp-trac] [WordPress Trac] #38958: REST API: Capability check for creating terms differs from wp-admin
WordPress Trac
noreply at wordpress.org
Sat Nov 26 22:28:30 UTC 2016
#38958: REST API: Capability check for creating terms differs from wp-admin
--------------------------+------------------------------------------
Reporter: johnbillion | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 4.8
Component: Taxonomy | Version: trunk
Severity: normal | Keywords: needs-patch needs-unit-tests
Focuses: rest-api |
--------------------------+------------------------------------------
The capability check used in `WP_REST_Terms_Controller` when attempting to
create a new term is `manage_terms`, but it should be `edit_terms`.
Refs:
* https://core.trac.wordpress.org/browser/trunk/src/wp-admin/edit-
tags.php?rev=39308&marks=74#L70
* https://core.trac.wordpress.org/browser/trunk/src/wp-admin/edit-
tags.php?rev=39308&marks=322#L320
In #33975 we'll hopefully change this to `create_terms`.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/38958>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list