Changeset 33378 for branches/3.8/src/wp-admin/includes/dashboard.php

Timestamp:

07/23/2015 04:18:49 AM (10 years ago)

Author:

pento

Message:

Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.

Merge of [33357] to the 3.8 branch.

File:

• branches/3.8/src/wp-admin/includes/dashboard.php (modified) (1 diff)

branches/3.8/src/wp-admin/includes/dashboard.php

@@ -333 +333 @@
 function wp_dashboard_quick_press( $error_msg = false ) {
     global $post_ID;
+
+    if ( ! current_user_can( 'edit_posts' ) ) {
+        return;
+    }
 
     /* Check if a new auto-draft (= no new post_ID) is needed or if the old can be used */