[wp-trac] [WordPress Trac] #40546: media endpoint should not be public in default installation

[WordPress Trac]

#40546: media endpoint should not be public in default installation
-------------------------+------------------------------
 Reporter:  arkonisus    |       Owner:
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  Awaiting Review
Component:  REST API     |     Version:  4.7
 Severity:  normal       |  Resolution:
 Keywords:               |     Focuses:
-------------------------+------------------------------

Comment (by johnbillion):

 Replying to [ticket:40546 arkonisus]:
 > Just think about a site owner who has uploaded some files for the next
 scheduled blog post or some information only accessible to certain users
 e.g. the pricelists for next month.

 It's worth mentioning here that media that is attached to a post (instead
 of uploaded to the media library directly) is correctly handled by the
 `/media` endpoint with regard to the status of its parent post. For
 example, if you upload a media file to a draft post, that media will not
 be exposed via the `/media` endpoint until the post is published.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/40546#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform