Changeset 33379 for branches/3.7/src/wp-admin/includes/dashboard.php

Timestamp:

07/23/2015 04:26:36 AM (10 years ago)

Author:

pento

Message:

Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.

Partial merge of [33357] to the 3.7 branch.

File:

• branches/3.7/src/wp-admin/includes/dashboard.php (modified) (1 diff)

branches/3.7/src/wp-admin/includes/dashboard.php

@@ -487 +487 @@
         printf('<p class="easy-blogging">' . __('You can also try %s, easy blogging from anywhere on the Web.') . '</p>', '<a href="' . esc_url( admin_url( 'tools.php' ) ) . '">' . __('Press This') . '</a>' );
         $_REQUEST = array(); // hack for get_default_post_to_edit()
+    }
+
+    if ( ! current_user_can( 'edit_posts' ) ) {
+        return;
     }