Ticket #8592: 8592-post.php.3.diff

post.php

@@ -2458 +2458 @@
  * @return array List of pages matching defaults or $args
  */
 function &get_pages($args = '') {
-        global $wpdb;
+        global $wpdb, $user_ID;
 
         $defaults = array(
                 'child_of' => 0, 'sort_order' => 'ASC',
@@ -2566 +2566 @@
         if ( $parent >= 0 )
                 $where .= $wpdb->prepare(' AND post_parent = %d ', $parent);
 
-        $query = "SELECT * FROM $wpdb->posts $join WHERE (post_type = 'page' AND post_status = 'publish') $where ";
-        $query .= $author_query;
+        $query = "SELECT * FROM $wpdb->posts $join WHERE (post_type = 'page'";
+        if ( is_admin() ) {
+                $where .= current_user_can( "edit_private_pages" ) ? "" : " AND (post_status = 'publish' OR post_author = $user_ID AND post_status = 'private')";
+        }
+        else {
+                $where .= " AND (post_status = 'publish')";
+        }
+        $query .= " $where )" . $author_query;
         $query .= " ORDER BY " . $sort_column . " " . $sort_order ;
 
         if ( !empty($number) )