Security Breach: Editing off others posts with Level 1

[anonymousbugger]

If there are several users set to level one they can edit all posts by every user at this level. On the blog there is always the "edit this" link and administration doesn't validate too.

[anonymousbugger]

I have fixed it with adding something like:

if (($user_level == 1

$user_level == 2) && ($authordata->ID != $user_ID ))

return / die;

to wp-includes/template-functions-links.php function function edit_post_link and to file wp-admin/post.php in the edit-part.