Changeset 43137 for trunk

Timestamp:

05/03/2018 06:51:38 AM (5 years ago)

Author:

SergeyBiryukov

Message:

REST API: When handling who=authors query parameter for GET wp/v2/users, only check edit_posts for post types that support author.

Props danielbachhuber.
Fixes #42202.

File:

• trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php (modified) (1 diff)

trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php

@@ -197 +197 @@
             $types = get_post_types( array( 'show_in_rest' => true ), 'objects' );
             foreach ( $types as $type ) {
-                if ( current_user_can( $type->cap->edit_posts ) ) {
+                if ( post_type_supports( $type->name, 'author' )
+                    && current_user_can( $type->cap->edit_posts ) ) {
                     $can_view = true;
                 }