Ticket #2302: 2302.diff

wp-admin/edit-form-advanced.php

@@ -218 +218 @@
 <?php do_action('edit_form_advanced'); ?>
 
 <?php
-$uploading_iframe_ID = (0 == $post_ID ? $temp_ID : $post_ID);
-$uploading_iframe_src = "inline-uploading.php?action=view&amp;post=$uploading_iframe_ID";
-$uploading_iframe_src = apply_filters('uploading_iframe_src', $uploading_iframe_src);
-if ( false != $uploading_iframe_src )
-        echo '<iframe id="uploading" border="0" src="' . $uploading_iframe_src . '">' . __('This feature requires iframe support.') . '</iframe>';
+if (current_user_can('upload_files')) {
+        $uploading_iframe_ID = (0 == $post_ID ? $temp_ID : $post_ID);
+        $uploading_iframe_src = "inline-uploading.php?action=view&amp;post=$uploading_iframe_ID";
+        $uploading_iframe_src = apply_filters('uploading_iframe_src', $uploading_iframe_src);
+        if ( false != $uploading_iframe_src )
+                echo '<iframe id="uploading" border="0" src="' . $uploading_iframe_src . '">' . __('This feature requires iframe support.') . '</iframe>';
+}
 ?>
 
 <div id="advancedstuff" class="dbx-group" >