WordPress.org

Make WordPress Core

Opened 2 years ago

Closed 8 months ago

#19286 closed defect (bug) (duplicate)

Users without access to Comments screen can see links to it

Reported by: johnbillion Owned by:
Milestone: Priority: normal
Severity: normal Version: 3.0
Component: Posts, Post Types Keywords: has-patch
Focuses: Cc:

Description

The comments bubble that shows on up next to each post on post listing screens doesn't check for the edit_posts capability. This means on post type screens where a user has the edit_{post_type} capability but not the edit_posts capability, the comment bubble links to the Comments screen which they do not have access to.

We should still show the comment bubble in this case but not link it to the Comments screen.

Attachments (1)

19286.patch (2.8 KB) - added by johnbillion 2 years ago.

Download all attachments as: .zip

Change History (7)

johnbillion2 years ago

comment:1 johnbillion2 years ago

  • Keywords has-patch added

Patch which retains the comment bubble but removes its link for users without the edit_posts capability.

comment:3 DrewAPicture2 years ago

Patch looks good and works as expected -> No href is applied if user doesn't have edit_posts cap.

comment:4 nacin2 years ago

I would rather fix the issue where you can't access the Comments screen without edit_posts. :-(

comment:5 nacin2 years ago

  • Version changed from 3.3 to 3.0

comment:6 johnbillion8 months ago

  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Status changed from new to closed

Closing in favour of #12104 which deals with comment management capabilities.

Note: See TracTickets for help on using tickets.