Ticket #56681: 56681.diff

tests/phpunit/tests/rest-api/rest-posts-controller.php

@@ -1977 +1977 @@
                 $request->set_param( 'context', 'edit' );
                 $response = rest_get_server()->dispatch( $request );
                 $data     = $response->get_data();
+                /*
+                 * Authenticated users should only be allowed to read the content of password protected posts
+                 * if they have the 'edit_post' meta capability for the post. In other words, the content
+                 * of a password protected post created by an Editor should not be viewable by a Contributor.
+                 */
                 $this->assertStringNotContainsString( $post_content, $data['content']['rendered'] );
         }