Changeset 37808

Timestamp:

06/21/2016 02:49:46 PM (7 years ago)

Author:

rachelbaker

Message:

Revisions: Change the capability needed to view revision diffs to edit_post.

Merge of [37779] to the 3.7 branch.

Location:

branches/3.7/src/wp-admin

Files:

• includes/ajax-actions.php (modified) (1 diff)
• revision.php (modified) (1 diff)

branches/3.7/src/wp-admin/includes/ajax-actions.php

@@ -2227 +2227 @@
         wp_send_json_error();
 
-    if ( ! current_user_can( 'read_post', $post->ID ) )
+    if ( ! current_user_can( 'edit_post', $post->ID ) )
         wp_send_json_error();
 

branches/3.7/src/wp-admin/revision.php

@@ -64 +64 @@
         break;
 
-    if ( ! current_user_can( 'read_post', $revision->ID ) || ! current_user_can( 'read_post', $post->ID ) )
+    if ( ! current_user_can( 'read_post', $revision->ID ) || ! current_user_can( 'edit_post', $revision->post_parent ) )
         break;