[wp-trac] [WordPress Trac] #62737: Block editor Author list missing capability check
WordPress Trac
noreply at wordpress.org
Wed Dec 25 11:27:55 UTC 2024
#62737: Block editor Author list missing capability check
--------------------------+-----------------------------
Reporter: cagdasdag | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version: 6.7.1
Severity: normal | Keywords:
Focuses: |
--------------------------+-----------------------------
Hello
The author dropdown in page settings is not working correctly in block
editor. It doesn't check user capabilities.
Here is the steps to replicate
- Install a fresh WP
- Create a contributor user so you will have 2 user 1 admin and 1
contributor
- Create a page in Classic Editor
- You will see it is showing only admin user in Author change dropdown
because contributor doesn't have edit_pages capability
- Create a page in Block Editor
- Go to author change dropdown, you will see contributor user as well.
Which looks a bug to me. We need to make sure that there is a capability
check.
Screenshots;
Classic Editor:
https://share.cleanshot.com/69vlJWcH
Block Editor:
https://share.cleanshot.com/xyVlryhh
--
Ticket URL: <https://core.trac.wordpress.org/ticket/62737>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list