Changeset 34151 for branches/4.3

Timestamp:

09/14/2015 10:49:39 PM (9 years ago)

Author:

ocean90

Message:

XMLRPC: Don't allow private posts to be sticky.

Merge of [34135] to the 4.3 branch.

See #20662.

File:

• branches/4.3/src/wp-includes/class-wp-xmlrpc-server.php (modified) (1 diff)

branches/4.3/src/wp-includes/class-wp-xmlrpc-server.php

@@ -5235 +5235 @@
         $tags_input = isset( $content_struct['mt_keywords'] ) ? $content_struct['mt_keywords'] : null;
 
-        if ( ('publish' == $post_status) ) {
-            if ( ( 'page' == $post_type ) && ! current_user_can( 'publish_pages' ) ) {
+        if ( 'publish' == $post_status || 'private' == $post_status ) {
+            if ( 'page' == $post_type && ! current_user_can( 'publish_pages' ) ) {
                 return new IXR_Error( 401, __( 'Sorry, you do not have the right to publish this page.' ) );
             } elseif ( ! current_user_can( 'publish_posts' ) ) {