[wp-trac] [WordPress Trac] #62737: Block editor Author list missing capability check

WordPress Trac noreply at wordpress.org
Wed Dec 25 11:27:55 UTC 2024


#62737: Block editor Author list missing capability check
--------------------------+-----------------------------
 Reporter:  cagdasdag     |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  6.7.1
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Hello

 The author dropdown in page settings is not working correctly in block
 editor. It doesn't check user capabilities.

 Here is the steps to replicate
 - Install a fresh WP
 - Create a contributor user so you will have 2 user 1 admin and 1
 contributor
 - Create a page in Classic Editor
 - You will see it is showing only admin user in Author change dropdown
 because contributor doesn't have edit_pages capability
 - Create a page in Block Editor
 - Go to author change dropdown, you will see contributor user as well.

 Which looks a bug to me. We need to make sure that there is a capability
 check.

 Screenshots;
 Classic Editor:
 https://share.cleanshot.com/69vlJWcH

 Block Editor:
 https://share.cleanshot.com/xyVlryhh

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62737>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list