Changeset 43138

Timestamp:

05/03/2018 06:53:09 AM (8 years ago)

Author:

SergeyBiryukov

Message:

REST API: When handling who=authors query parameter for GET wp/v2/users, only check edit_posts for post types that support author.

Props danielbachhuber.
Merges [43137] to the 4.9 branch.
Fixes #42202.

Location:

branches/4.9

Files:

• . (modified) (1 prop)
• src/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php (modified) (1 diff)

branches/4.9/src/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php

@@ -191 +191 @@
             $types = get_post_types( array( 'show_in_rest' => true ), 'objects' );
             foreach ( $types as $type ) {
-                if ( current_user_can( $type->cap->edit_posts ) ) {
+                if ( post_type_supports( $type->name, 'author' )
+                    && current_user_can( $type->cap->edit_posts ) ) {
                     $can_view = true;
                 }