Ticket #27452: 27452.patch

src/wp-admin/includes/ajax-actions.php

@@ -1324 +1324 @@
                 $data['parent_id'] = $data['post_parent'];
 
         // status
-        if ( isset($data['keep_private']) && 'private' == $data['keep_private'] )
+        $post_type_object = get_post_type_object( $post['post_type'] );
+        if ( current_user_can( $post_type_object->cap->publish_posts ) && isset($data['keep_private']) && 'private' == $data['keep_private'] )
                 $data['post_status'] = 'private';
         else
                 $data['post_status'] = $data['_status'];

src/wp-admin/includes/class-wp-posts-list-table.php

@@ -1001 +1001 @@
                                         ?>
                                 </em>
                                 <label class="alignleft inline-edit-private">
-                                        <input type="checkbox" name="keep_private" value="private" />
+                                        <input type="checkbox" name="keep_private" value="private" <?php if( ! $can_publish ) echo 'disabled'; ?> />
                                         <span class="checkbox-title"><?php echo __( 'Private' ); ?></span>
                                 </label>
                         </div>