Ticket #44079: 44079.2.diff

src/wp-admin/includes/misc.php

@@ -1564 +1564 @@
                         return;
                 }
 
-                if ( ! current_user_can( 'manage_privacy_options' ) ) {
-                        return;
-                }
-
                 $policy_page_id = (int) get_option( 'wp_page_for_privacy_policy' );
 
                 if ( ! $policy_page_id || $policy_page_id != $post->ID ) {

src/wp-includes/capabilities.php

@@ -121 +121 @@
                                         $caps[] = $post_type->cap->delete_private_posts;
                                 }
                         }
+
+                        /*
+                         * Editing the Privacy Policy page should require the same capability
+                         * as choosing which page is used.
+                         */
+                        $privacy_policy_page_id = (int) get_option( 'wp_page_for_privacy_policy' );
+                        if ( $privacy_policy_page_id && ! empty( $args[0] ) && $privacy_policy_page_id === $args[0] ) {
+                                $caps[] = 'manage_privacy_options';
+                        }
+
                         break;
                 // edit_post breaks down to edit_posts, edit_published_posts, or
                 // edit_others_posts
@@ -183 +193 @@
                                         $caps[] = $post_type->cap->edit_private_posts;
                                 }
                         }
+
+                        /*
+                         * Editing the Privacy Policy page should require the same capability
+                         * as choosing which page is used.
+                         */
+                        $privacy_policy_page_id = (int) get_option( 'wp_page_for_privacy_policy' );
+                        if ( $privacy_policy_page_id && ! empty( $args[0] ) && $privacy_policy_page_id === $args[0] ) {
+                                $caps[] = 'manage_privacy_options';
+                        }
+
                         break;
                 case 'read_post':
                 case 'read_page':