Changeset 13786 for trunk/wp-admin/includes/meta-boxes.php

Timestamp:

03/21/2010 02:29:11 AM (16 years ago)

Author:

dd32

Message:

Use correct cap checks and nonces for custom post_type's

File:

• trunk/wp-admin/includes/meta-boxes.php (modified) (3 diffs)

trunk/wp-admin/includes/meta-boxes.php

@@ -15 +15 @@
         $post_type = $post->post_type;
         $post_type_object = get_post_type_object($post_type);
-        $type_cap = $post_type_object->capability_type;
-        $can_publish = current_user_can("publish_${type_cap}s");
+        $can_publish = current_user_can($post_type_object->publish_cap);
 ?>
 <div class="submitbox" id="submitpost">
@@ -195 +194 @@
 <div id="delete-action">
 <?php
-if ( current_user_can( "delete_${type_cap}", $post->ID ) ) {
+if ( current_user_can( "delete_post", $post->ID ) ) {
         if ( !EMPTY_TRASH_DAYS ) {
                 $delete_url = wp_nonce_url( add_query_arg( array('action' => 'delete', 'post' => $post->ID) ), "delete-${post_type}_{$post->ID}" );
@@ -408 +407 @@
 
 /** 
- * Displa comments for post table header
+ * Display comments for post table header
  * 
  * @since 3.0