Index: xmlrpc.php
===================================================================
--- xmlrpc.php	(revision 6495)
+++ xmlrpc.php	(working copy)
@@ -1535,7 +1535,15 @@
 			return $this->error;
 		}
 
+		$this_user = set_current_user( 0, $user_login );
+
 		foreach ($posts_list as $entry) {
+			if ( 
+				!empty( $entry['post_password'] ) 
+				&& !current_user_can( 'edit_post', $entry['ID'] )
+			) {
+				unset( $entry['post_password'] );
+			}
 
 			$post_date = mysql2date('Ymd\TH:i:s', $entry['post_date']);
 			$post_date_gmt = mysql2date('Ymd\TH:i:s', $entry['post_date_gmt']);