Opened 18 months ago

Last modified 18 months ago

#19286 new defect (bug)

Users without access to Comments screen can see links to it

Reported by: johnbillion Owned by:
Priority: normal Milestone: Awaiting Review
Component: Post Types Version: 3.0
Severity: normal Keywords: has-patch
Cc:

Description

The comments bubble that shows on up next to each post on post listing screens doesn't check for the edit_posts capability. This means on post type screens where a user has the edit_{post_type} capability but not the edit_posts capability, the comment bubble links to the Comments screen which they do not have access to.

We should still show the comment bubble in this case but not link it to the Comments screen.

Attachments (1)

19286.patch​ (2.8 KB) - added by johnbillion 18 months ago.

Download all attachments as: .zip

Change History (6)

johnbillion — 18 months ago

comment:1   johnbillion — 18 months ago

  • Keywords has-patch added

Patch which retains the comment bubble but removes its link for users without the edit_posts capability.

comment:2   johnbillion — 18 months ago

Related: #19287

comment:3   DrewAPicture — 18 months ago

Patch looks good and works as expected -> No href is applied if user doesn't have edit_posts cap.

comment:4   nacin — 18 months ago

I would rather fix the issue where you can't access the Comments screen without edit_posts. :-(

comment:5   nacin — 18 months ago

  • Version changed from 3.3 to 3.0
Note: See TracTickets for help on using tickets.