WordPress.org
Get WordPress

Make WordPress Core

Opened 13 years ago

Closed 11 years ago

#19286 closed defect (bug) (duplicate)

Users without access to Comments screen can see links to it

Reported by: johnbillion's profile johnbillion Owned by:
Milestone: Priority: normal
Severity: normal Version: 3.0
Component: Posts, Post Types Keywords: has-patch
Focuses: Cc:

Description

The comments bubble that shows on up next to each post on post listing screens doesn't check for the edit_posts capability. This means on post type screens where a user has the edit_{post_type} capability but not the edit_posts capability, the comment bubble links to the Comments screen which they do not have access to.

We should still show the comment bubble in this case but not link it to the Comments screen.

Attachments (1)

19286.patch​ (2.8 KB) - added by johnbillion 13 years ago.

Download all attachments as: .zip

Change History (7)

@johnbillion
13 years ago

#1 @johnbillion
13 years ago

  • Keywords has-patch added

Patch which retains the comment bubble but removes its link for users without the edit_posts capability.

#3 @DrewAPicture
13 years ago

Patch looks good and works as expected -> No href is applied if user doesn't have edit_posts cap.

#4 @nacin
13 years ago

I would rather fix the issue where you can't access the Comments screen without edit_posts. :-(

#5 @nacin
13 years ago

  • Version changed from 3.3 to 3.0

#6 @johnbillion
11 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Status changed from new to closed

Closing in favour of #12104 which deals with comment management capabilities.

Note: See TracTickets for help on using tickets.