WordPress.org
Get WordPress

Make WordPress Core

Opened 19 years ago

Closed 19 years ago

Last modified 19 years ago

#4404 closed defect (bug) (fixed)

Add 'edit_posts' capability check to metaWeblog.newPost in XML-RPC

Reported by: josephscott Owned by:
Priority: normal Milestone: 2.2.1
Component: XML-RPC Version: 2.2
Severity: normal Keywords:
Cc: Focuses:

Description

A user with the role of Contributor should be allowed to save a post, but not publish one. The metaWeblog.newPost method was not correctly checking this.

The attached diff corrects this issue.

This problem was discovered by Wei-Yeh Lee.

Attachments (1)

xmlrpc.php-diff​ (544 bytes ) - added by josephscott 19 years ago.

Download all attachments as: .zip

Change History (4)

@josephscott
19 years ago

#1 @ryan
19 years ago

  • Version → 2.2

+1 for 2.2 and trunk

#2 @ryan
19 years ago

  • Resolution → fixed
  • Status new → closed

(In [5650]) Add 'edit_posts' capability check to metaWeblog.newPost. Props Joseph Scott and Wei-Yeh Lee. fixes #4404 for 2.2

#3 @ryan
19 years ago

(In [5651]) Add 'edit_posts' capability check to metaWeblog.newPost. Props Joseph Scott and Wei-Yeh Lee. fixes #4404 for 2.3

Note: See TracTickets for help on using tickets.