Ticket #31236: 31236.patch

src/wp-admin/includes/ajax-actions.php

@@ -1855 +1855 @@
 
         if ( isset( $_REQUEST['post_id'] ) ) {
                 $post_id = $_REQUEST['post_id'];
-                if ( ! current_user_can( 'edit_post', $post_id ) ) {
+                if ( ! current_user_can( 'edit_posts', $post_id ) ) {
                         wp_send_json_error( array(
                                 'message'  => __( "You don't have permission to attach files to this post." ),
                                 'filename' => $_FILES['async-upload']['name'],