Changeset 37797

Timestamp:

06/21/2016 02:40:07 PM (8 years ago)

Author:

rachelbaker

Message:

Revisions: Change the capability needed to view revision diffs to edit_post.

Merge of [37779] to the 4.3 branch.

Location:

branches/4.3/src/wp-admin

Files:

• includes/ajax-actions.php (modified) (1 diff)
• revision.php (modified) (1 diff)

branches/4.3/src/wp-admin/includes/ajax-actions.php

@@ -2652 +2652 @@
         wp_send_json_error();
 
-    if ( ! current_user_can( 'read_post', $post->ID ) )
+    if ( ! current_user_can( 'edit_post', $post->ID ) )
         wp_send_json_error();
 

branches/4.3/src/wp-admin/revision.php

@@ -64 +64 @@
         break;
 
-    if ( ! current_user_can( 'read_post', $revision->ID ) || ! current_user_can( 'read_post', $post->ID ) )
+    if ( ! current_user_can( 'read_post', $revision->ID ) || ! current_user_can( 'edit_post', $revision->post_parent ) )
         break;