Ticket #32243: post.2.diff

post.php

@@ -5330 +5330 @@
  *
  * @see get_private_posts_cap_sql()
  *
- * @param string $post_type   Post type.
+ * @param array  $post_types  Post type(s).
  * @param bool   $full        Optional. Returns a full WHERE statement instead of just
  *                            an 'andalso' term. Default true.
  * @param int    $post_author Optional. Query posts having a single author ID. Default null.
@@ -5338 +5338 @@
  *                            $current_user.  Default false.
  * @return string SQL WHERE code that can be added to a query.
  */
-function get_posts_by_author_sql( $post_type, $full = true, $post_author = null, $public_only = false ) {
+function get_posts_by_author_sql( $post_types, $full = true, $post_author = null, $public_only = false ) {
         global $wpdb;
 
         // Private posts.
-        $post_type_obj = get_post_type_object( $post_type );
-        if ( ! $post_type_obj )
-                return $full ? 'WHERE 1 = 0' : ' 1 = 0 ';
-
+        $cap_final = true;
+        foreach ($post_types as $post_type) {
+                $post_type_obj = get_post_type_object( $post_type );
+                if ( ! $post_type_obj )
+                        return $full ? 'WHERE 1 = 0' : ' 1 = 0 ';
+                $cap_final = $cap_final && current_user_can( $post_type_obj->cap->read_private_posts );
+        }       
+        
         /**
          * Filter the capability to read private posts for a custom post type
          * when generating SQL for getting posts by author.
@@ -5355 +5359 @@
          *
          * @param string $cap Capability.
          */
-        if ( ! $cap = apply_filters( 'pub_priv_sql_capability', '' ) ) {
-                $cap = $post_type_obj->cap->read_private_posts;
-        }
+        if ( ! $cap = apply_filters( 'pub_priv_sql_capability', '' ) ) $cap = $cap_final;
 
-        $sql = $wpdb->prepare( 'post_type = %s', $post_type );
+        $post_type_sql = array_fill(0, count($post_types), '%s');
+        $where = '(post_type = '.implode(' OR post_type = ', $post_type_sql).')';
+        $sql = $wpdb->prepare($where, $post_types);
 
         if ( null !== $post_author ) {
                 $sql .= $wpdb->prepare( ' AND post_author = %d', $post_author );
@@ -5368 +5372 @@
         // Only need to check the cap if $public_only is false.
         $post_status_sql = "post_status = 'publish'";
         if ( false === $public_only ) {
-                if ( current_user_can( $cap ) ) {
+                if ( $cap ) {
                         // Does the user have the capability to view private posts? Guess so.
                         $post_status_sql .= " OR post_status = 'private'";
                 } elseif ( is_user_logged_in() ) {