Make WordPress Core

Opened 7 years ago

Last modified 7 years ago

#41448 new defect (bug)

Contributors shouldn't be able to change the date of their drafts

Reported by: davilera's profile davilera Owned by:
Milestone: Future Release Priority: low
Severity: normal Version: 2.7
Component: Posts, Post Types Keywords: has-patch needs-unit-tests
Focuses: administration, rest-api Cc:


(I'm guessing that) contributors shouldn't be able to change a post's publication date—that's why the Publish box doesn't include the date when logged in as a contributor in the first place. However, if a contributor quick edits a post in the All Posts screen, they'll be able to change the post's date.

We should remove the date field from the Quick Edit form. Or, alternatively, we should allow contributors to edit this date while they're editing a post. Either way, both screens should be consistent.

Attachments (1)

41448.diff (625 bytes) - added by davilera 7 years ago.

Download all attachments as: .zip

Change History (3)

#1 @johnbillion
7 years ago

  • Component changed from Role/Capability to Posts, Post Types
  • Focuses administration rest-api added
  • Keywords needs-patch added
  • Milestone changed from Awaiting Review to Future Release
  • Priority changed from normal to low
  • Version changed from 4.8 to 2.7

Confirmed. Users who cannot publish a post should not be able to change the post date (introduced in [7409]).

This bug has been present since Quick Edit was introduced in 2.7.

This might affect the REST API too.

7 years ago

#2 @davilera
7 years ago

  • Keywords has-patch needs-unit-tests added; needs-patch removed

41448.diff checks whether the current user can publish posts (of the current post type). If they can't (that is, if they're a Contributor), the fields for changing a post's date are not included in Quick Edit.

@johnbillion, I didn't check the REST API. Should we address the (possible) issue with the REST API here, or should we open a separate ticket?

Note: See TracTickets for help on using tickets.