Ticket #28327: 28327.2.diff

src/wp-admin/edit-form-advanced.php

@@ -40 +40 @@
         }
 }
 
-if ( $thumbnail_support ) {
+if ( $thumbnail_support && current_user_can( 'upload_files' ) ) {
         add_thickbox();
         wp_enqueue_media( array( 'post' => $post_ID ) );
 }
@@ -183 +183 @@
 if ( post_type_supports($post_type, 'page-attributes') )
         add_meta_box('pageparentdiv', 'page' == $post_type ? __('Page Attributes') : __('Attributes'), 'page_attributes_meta_box', null, 'side', 'core');
 
-if ( $thumbnail_support )
+if ( $thumbnail_support && current_user_can( 'upload_files' ) )
         add_meta_box('postimagediv', __('Featured Image'), 'post_thumbnail_meta_box', null, 'side', 'low');
 
 if ( post_type_supports($post_type, 'excerpt') )