Changeset 47850 for trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php

Timestamp:

05/23/2020 03:22:53 PM (5 years ago)

Author:

ocean90

Message:

Role/Capability: Use meta caps edit_post, read_post, and delete_post directly.

Rather than consulting the post type object, let map_meta_cap() handle that for us.

Props peterwilsoncc, ocean90.
Fixes #50128.
See #23226.

File:

• trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php (modified) (1 diff)

trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php

@@ -1775 +1775 @@
 
         if ( post_password_required( $post ) ) {
-            $result = current_user_can( $post_type->cap->edit_post, $post->ID );
+            $result = current_user_can( 'edit_post', $post->ID );
         } else {
             $result = $posts_controller->check_read_permission( $post );