Changeset 33357 for trunk/src/wp-admin/includes/dashboard.php

Timestamp:

07/22/2015 04:01:53 AM (8 years ago)

Author:

pento

Message:

Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.

File:

• trunk/src/wp-admin/includes/dashboard.php (modified) (1 diff)

trunk/src/wp-admin/includes/dashboard.php

@@ -442 +442 @@
 function wp_dashboard_quick_press( $error_msg = false ) {
     global $post_ID;
+
+    if ( ! current_user_can( 'edit_posts' ) ) {
+        return;
+    }
 
     /* Check if a new auto-draft (= no new post_ID) is needed or if the old can be used */