WordPress.org

Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #4353


Ignore:
Timestamp:
05/28/07 16:59:04 (8 years ago)
Author:
markjaquith
Comment:

edit_posts is used to control comment editing, specifically, but viewing, generally. If you have the edit_posts capability, you'll be able to view all comments, but only be able to edit the ones on your posts.

Contributors won't be able to view any comments or edit any. The only default role affected here is "Author."

What you're advocating is a change in functionality, so I'm going to update the ticket to reflect that.

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #4353

    • Property Status changed from new to assigned
    • Property Summary changed from Everyone above subscriber sees everyone's comments, IPs, and emails to Users with edit_posts capability can see everyone's comments, IPs, and email addresses
    • Property Owner changed from anonymous to markjaquith
    • Property Type changed from defect to enhancement
    • Property Severity changed from critical to major
  • Ticket #4353 – Description

    initial v1  
    33Everyone above subscriber can click "comments" and see everyone's comments, email addresses, and IP addresses. This is a very BAD thing. 
    44 
    5 From what I've read, edit_posts for contributor and authors is supposed to only display the person's own comments. However this function is broken somehow and instead anyone can see everyone else's comments.  
     5From what I've read, edit_posts for contributor and authors is supposed to only display the person's own comments. However this function is broken somehow and instead anyone can see everyone else's comments. 
     6 
     7---- 
     8 
     9Mark Jaquith says: 
     10 
     11It wasn't designed to restrict people with {{{edit_posts}}} from only being able to see the comments they can edit.  That would require a slight tweak in the code. 
     12 
     13---- 
    614 
    715Is this a core code issue or a plugin issue? I think it is core code.