![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Opened 14 years ago
Closed 14 years ago
#20336 closed defect (bug) (fixed)
XMLRPC several methods for check for capability before it exists
| Reported by: | markoheijnen | Owned by: | nacin |
|---|---|---|---|
| Priority: | normal | Milestone: | 3.4 |
| Component: | XML-RPC | Version: | |
| Severity: | normal | Keywords: | has-patch commit |
| Cc: | Focuses: |
Description
When you check for the capability to edit a post it also applies for not existing posts.
So if a post ID doesn't exists it will also say you are not allowed to edit the post.
So I guess wp_get_single_post should be before current_user_can. So the right error message can be applied. Also the check on post_date for "no such post" is weird
Attachments (1)
Change History (7)
#1
@
14 years ago
Version 0, edited 14 years ago by
(next)
#2
@
14 years ago
- Summary XMLRPC mw_getPost never shows the post doesn't exists → XMLRPC several methods for check for capability before it exists
#5
@
14 years ago
- Keywords has-patch commit added
20336.diff is the result of reviewing every meta cap in class-wp-xmlrpc-server.php. Could use a second look.
Note:
See TracTickets
for help on using tickets.
Added unit test cases for this method [UT599]