Image Gallery of Private Post is publicly displayed
|Reported by:||hakre||Owned by:|
Might have been forgotten only, I just ran over this inconsistency while beta-testing:
The Image Gallery of a Private Post is displayed (in another post via the Shorttag with id parameter) whereas, when clicking on the images to go to the attachment page, you get a 404 not found.
Steps to reproduce
Create a new Post, set a title and the Status to private.
Save as Draft.
Preview it, to get the ID easily from URL.
Upload a Bunch of Images.
Insert the Gallery Shorttag inside that Post Body.
Publish the Post.
Create a second new Post
Give it a Title and Insert the Gallery Shortcode with the ID from the last Post.
Copy the URL.
Open another Browser so to have a new User-Session.
Visit that URL.
You should not see a gallery.
You see a gallery.
When clicking on a gallery link you get a 404 page.
I see an inconsitency here but have no Idea how to deal with it.
So either the gallery should not be found as well (not found as in 404 but in this case: not output) or the attachment pages should be able to call as well.