Ticket #10677: admin-ajax.patch

wp-admin/admin-ajax.php

@@ -348 +348 @@
                 $x->send();
         }
 
-        if ( !current_user_can( 'edit_post', $comment->comment_post_ID ) )
+        if ( !current_user_can( 'edit_post', $comment->comment_post_ID ) && !current_user_can( 'moderate_comments' ) )
                 die('-1');
-        if ( !current_user_can( 'moderate_comments' ) )
-                die('-1');
 
         $current = wp_get_comment_status( $comment->comment_ID );
         if ( $_POST['new'] == $current )