Changeset 24593 for trunk/wp-admin/includes/media.php

Timestamp:

07/08/2013 08:05:42 PM (13 years ago)

Author:

nacin

Message:

Use meta caps edit_post, read_post, and delete_post directly, rather than consulting the post type object. map_meta_cap() handles that for us. props markjaquith, kovshenin. fixes #23226.

File:

• trunk/wp-admin/includes/media.php (modified) (1 diff)

trunk/wp-admin/includes/media.php

@@ -497 +497 @@
     if ( !empty($_POST['attachments']) ) foreach ( $_POST['attachments'] as $attachment_id => $attachment ) {
         $post = $_post = get_post($attachment_id, ARRAY_A);
-        $post_type_object = get_post_type_object( $post[ 'post_type' ] );
-
-        if ( !current_user_can( $post_type_object->cap->edit_post, $attachment_id ) )
+
+        if ( !current_user_can( 'edit_post', $attachment_id ) )
             continue;