Ticket #39019: 39019.patch

wp-includes/class-wp-xmlrpc-server.php

@@ -3133 +3133 @@
                 /** This action is documented in wp-includes/class-wp-xmlrpc-server.php */
                 do_action( 'xmlrpc_call', 'wp.deleteCategory' );
 
-                if ( !current_user_can('manage_categories') )
-                        return new IXR_Error( 401, __( 'Sorry, you are not allowed to delete a category.' ) );
+                if ( !current_user_can( 'manage_categories', $category_id ) )
+                        return new IXR_Error( 401, __( 'Sorry, you are not allowed to delete this category.' ) );
 
                 $status = wp_delete_term( $category_id, 'category' );
 
@@ -3364 +3364 @@
                 }
 
                 if ( !current_user_can( 'edit_comment', $comment_ID ) ) {
-                        return new IXR_Error( 403, __( 'Sorry, you are not allowed to moderate or edit this comment.' ) );
+                        return new IXR_Error( 403, __( 'Sorry, you are not allowed to delete this comment.' ) );
                 }
 
                 /** This action is documented in wp-includes/class-wp-xmlrpc-server.php */