Make WordPress Core

Opened 22 years ago

Closed 22 years ago

Last modified 3 years ago

#294 closed defect (bug) (invalid)

Any registered user can edit anyone's post via "Edit This" link

Reported by: anonymousbugger Owned by: ryan
Priority: lowest Milestone:
Component: Administration Version:
Severity: trivial Keywords:
Cc: Focuses:

Description

If you log into admin and go to "View Site," every post has an "Edit This" link for it, even if you didn't write that post.

Change History (6)

#2 @MC_incubus
22 years ago

The admin account has level 10. I think the designed behavior is for level 10 accounts to be able to edit any post, even ones they didn't author.

???

#3 @ryan
22 years ago

  • Owner changed from anonymous to rboren
  • Resolution 10 → 70
  • Status new → closed

The behavior is as designed.

#6 in reply to: ↑ 5 @junsuijin
17 years ago

  • Priority normal → lowest
  • Severity major → trivial
  • Summary Any registered user can edit anyone's post via "Edit This" link → PLEASE, DELETE THIS SPAM

Replying to albass:
This one, by the same user as the #8318 spam, is also spam. Please Delete this, and ban this user.

#7 @BandonRandon
9 years ago

  • Summary PLEASE, DELETE THIS SPAM → Any registered user can edit anyone's post via "Edit This" link
Note: See TracTickets for help on using tickets.