Changeset 24597

Timestamp:

07/09/2013 02:22:57 AM (13 years ago)

Author:

nacin

Message:

XML-RPC: For wp.getOptions, set readonly to true for writable options that the user does not have permission to edit.

props westi.
fixes #20201.

File:

• trunk/wp-includes/class-wp-xmlrpc-server.php (modified) (2 diffs)

trunk/wp-includes/class-wp-xmlrpc-server.php

@@ -3200 +3200 @@
         function _getOptions($options) {
                 $data = array();
+                $can_manage = current_user_can( 'manage_options' );
                 foreach ( $options as $option ) {
                         if ( array_key_exists( $option, $this->blog_options ) ) {
@@ -3208 +3209 @@
                                         unset($data[$option]['option']);
                                 }
+
+                                if ( ! $can_manage )
+                                        $data[$option]['readonly'] = true;
                         }
                 }