wp.Options lies about the updatability of options.
|Reported by:||westi||Owned by:||westi|
|Severity:||normal||Keywords:||westi-likes has-patch dev-feedback commit|
When an XMLRPC client calls this API we give it a readonly status for each of the options returned which lets it know whether or not the options are writable or not.
This status is hardcoded in the code and not capability aware so a user with only subscriber level access is given the impression that they can update options they can't.
Change History (11)
comment:6 markoheijnen — 12 months ago
- Keywords 3.5-early removed
- Milestone changed from Future Release to 3.6