Changeset 8032 for trunk/wp-admin/includes/post.php

Timestamp:

06/02/2008 09:01:42 PM (18 years ago)

Author:

ryan

Message:

Don't unpublish posts when a user edit who can edit publised posts but not publih new posts edits a post. Props jeremyclarke. see #7070 for trunk

File:

• trunk/wp-admin/includes/post.php (modified) (1 diff)

trunk/wp-admin/includes/post.php

@@ -58 +58 @@
         $_POST['post_status'] = 'draft';
 
+    $previous_status = get_post_field('post_status',  $_POST['ID']);
+
+    // Posts 'submitted for approval' present are submitted to $_POST the same as if they were being published. 
+    // Change status from 'publish' to 'pending' if user lacks permissions to publish or to resave published posts.
     if ( 'page' == $_POST['post_type'] ) {
         if ( 'publish' == $_POST['post_status'] && !current_user_can( 'publish_pages' ) )
             $_POST['post_status'] = 'pending';
     } else {
-        if ( 'publish' == $_POST['post_status'] && !current_user_can( 'publish_posts' ) )
-            $_POST['post_status'] = 'pending';
+        if ( 'publish' == $_POST['post_status'] && !current_user_can( 'publish_posts' ) ) :
+            // Stop attempts to publish new posts, but allow already published posts to be saved if appropriate.
+            if ( $previous_status != 'publish' OR !current_user_can( 'edit_published_posts') )
+                $_POST['post_status'] = 'pending';
+        endif;
     }