WordPress.org

Make WordPress Core

Opened 5 months ago

Closed 5 months ago

Last modified 5 months ago

#47506 closed defect (bug) (invalid)

edit_published_posts capability is broken

Reported by: shlomi.tur Owned by:
Milestone: Priority: normal
Severity: normal Version: 5.2.1
Component: Role/Capability Keywords:
Focuses: administration Cc:
PR Number:

Description

Hi everyone,
After couple of days of debugging, I've just installed WordPress 5.2.1 and found that Contributors can edit their own posts after publishing by Editor.
Moreover, I've tried to turn off the capability manually by using the 'remove_cap' method, but there's no change.

This capability's default should be off as you can see here:
https://wordpress.org/support/article/roles-and-capabilities/#edit_published_posts

Change History (2)

#1 @johnbillion
5 months ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Status changed from new to closed

Thanks for the report, @shlomitur. As you've observed, contributors cannot edit their own published posts as they are not granted the edit_published_pages capability. The problem you're seeing must be local to your particular installation of WordPress.

I would recommend deactivating the plugins on your site one by one to see if one of them is overriding that capability. Also note that it is possible that a plugin granted that capability to an individual user with the Contributor role, or granted that capability to the Contributor role directly, in which case that capability might still be attached as they get stored persistently in the database.

Failing that, you can install a role and capability management plugin such as Members which will allow you to fix the capability.

#2 @SergeyBiryukov
5 months ago

  • Component changed from Users to Role/Capability
  • Severity changed from major to normal
Note: See TracTickets for help on using tickets.