WordPress.org

Make WordPress Core

Opened 10 months ago

Last modified 10 months ago

#41448 new defect (bug)

Contributors shouldn't be able to change the date of their drafts

Reported by: davilera Owned by:
Milestone: Future Release Priority: low
Severity: normal Version: 2.7
Component: Posts, Post Types Keywords: has-patch needs-unit-tests
Focuses: administration, rest-api Cc:

Description

(I'm guessing that) contributors shouldn't be able to change a post's publication date—that's why the Publish box doesn't include the date when logged in as a contributor in the first place. However, if a contributor quick edits a post in the All Posts screen, they'll be able to change the post's date.

We should remove the date field from the Quick Edit form. Or, alternatively, we should allow contributors to edit this date while they're editing a post. Either way, both screens should be consistent.

Attachments (1)

41448.diff (625 bytes) - added by davilera 10 months ago.

Download all attachments as: .zip

Change History (3)

#1 @johnbillion
10 months ago

  • Component changed from Role/Capability to Posts, Post Types
  • Focuses administration rest-api added
  • Keywords needs-patch added
  • Milestone changed from Awaiting Review to Future Release
  • Priority changed from normal to low
  • Version changed from 4.8 to 2.7

Confirmed. Users who cannot publish a post should not be able to change the post date (introduced in [7409]).

This bug has been present since Quick Edit was introduced in 2.7.

This might affect the REST API too.

@davilera
10 months ago

#2 @davilera
10 months ago

  • Keywords has-patch needs-unit-tests added; needs-patch removed

41448.diff checks whether the current user can publish posts (of the current post type). If they can't (that is, if they're a Contributor), the fields for changing a post's date are not included in Quick Edit.

@johnbillion, I didn't check the REST API. Should we address the (possible) issue with the REST API here, or should we open a separate ticket?

Note: See TracTickets for help on using tickets.