[wp-trac] [WordPress Trac] #38958: REST API: Capability check for creating terms differs from wp-admin

WordPress Trac noreply at wordpress.org
Mon Nov 28 01:41:11 UTC 2016


#38958: REST API: Capability check for creating terms differs from wp-admin
-----------------------------------------------+-----------------------
 Reporter:  johnbillion                        |       Owner:
     Type:  defect (bug)                       |      Status:  new
 Priority:  normal                             |   Milestone:  4.7
Component:  Taxonomy                           |     Version:  trunk
 Severity:  normal                             |  Resolution:
 Keywords:  needs-unit-tests has-patch commit  |     Focuses:  rest-api
-----------------------------------------------+-----------------------
Changes (by rmccue):

 * keywords:  needs-unit-tests has-patch => needs-unit-tests has-patch
               commit


Comment:

 It appears the capability is actually both `manage_terms` '''and'''
 `edit_terms` in the admin; `edit-tags.php` has
 [https://core.trac.wordpress.org/browser/trunk/src/wp-admin/edit-
 tags.php?rev=39308&marks=24#L24 an earlier check] for `manage_terms`.

 XML-RPC was updated in [38698], see also #35614; makes sense to update to
 match the new caps.

 Patch looks good. `WP_REST_Taxonomies_Controller` still contains 3
 instances of `manage_terms`, but seems like those uses haven't changed?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/38958#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list