Ticket #40922: 40922.3.diff

src/wp-includes/capabilities.php

@@ -488 +488 @@
                         $caps[] = 'manage_options';
                 }
                 break;
+        case 'delete_customize_changeset':
+        case 'edit_customize_changeset':
+        case 'read_customize_changeset':
+        case 'edit_customize_changesets':
+        case 'edit_others_customize_changesets':
+        case 'publish_customize_changesets':
+        case 'read_private_customize_changesets':
+                $caps = call_user_func_array( 'map_meta_cap', array_merge( array( 'customize', $user_id ), $args ) );
+                break;
         default:
                 // Handle meta capabilities for custom post types.
                 global $post_type_meta_caps;

src/wp-includes/post.php

@@ -168 +168 @@
                 ),
                 'public' => false,
                 '_builtin' => true, /* internal use only. don't use this when registering your own post type. */
-                'map_meta_cap' => true,
+                'map_meta_cap' => false,
                 'hierarchical' => false,
                 'rewrite' => false,
                 'query_var' => false,
@@ -177 +177 @@
                 'supports' => array( 'title', 'author' ),
                 'capability_type' => 'customize_changeset',
                 'capabilities' => array(
-                        'create_posts' => 'customize',
-                        'delete_others_posts' => 'customize',
-                        'delete_post' => 'customize',
-                        'delete_posts' => 'customize',
-                        'delete_private_posts' => 'customize',
-                        'delete_published_posts' => 'customize',
-                        'edit_others_posts' => 'customize',
-                        'edit_post' => 'customize',
-                        'edit_posts' => 'customize',
-                        'edit_private_posts' => 'customize',
-                        'edit_published_posts' => 'do_not_allow',
-                        'publish_posts' => 'customize',
+                        'delete_others_posts' => 'delete_others_customize_changesets',
+                        'delete_posts' => 'delete_customize_changesets',
+                        'delete_private_posts' => 'delete_private_customize_changesets',
+                        'delete_published_posts' => 'delete_published_customize_changesets',
+                        'edit_private_posts' => 'edit_private_customize_changesets',
+                        'edit_published_posts' => 'edit_published_customize_changesets',
                         'read' => 'read',
-                        'read_post' => 'customize',
-                        'read_private_posts' => 'customize',
                 ),
         ) );