Changeset 24593 for trunk/wp-admin/async-upload.php

Timestamp:

07/08/2013 08:05:42 PM (13 years ago)

Author:

nacin

Message:

Use meta caps edit_post, read_post, and delete_post directly, rather than consulting the post type object. map_meta_cap() handles that for us. props markjaquith, kovshenin. fixes #23226.

File:

• trunk/wp-admin/async-upload.php (modified) (1 diff)

trunk/wp-admin/async-upload.php

@@ -48 +48 @@
         if ( 'attachment' != $post->post_type )
                 wp_die( __( 'Unknown post type.' ) );
-        $post_type_object = get_post_type_object( 'attachment' );
-        if ( ! current_user_can( $post_type_object->cap->edit_post, $id ) )
+        if ( ! current_user_can( 'edit_post', $id ) )
                 wp_die( __( 'You are not allowed to edit this item.' ) );