![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Opened 19 years ago
Closed 18 years ago
#5344 closed enhancement (duplicate)
Users without comment moderation priv's shouldn't be able to see comments in moderation
| Reported by: | simonwheatley | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | Administration | Version: | |
| Severity: | normal | Keywords: | comments privileges user |
| Cc: | Focuses: |
Description
Currently users without comment moderation privileges can see the comments in moderation. This could be inappropriate for certain users.
I am working on a Wordpress Mu blogging system for a series of primary school classes and we'll necessarily be giving young children logins to the WP admin area. We want to allow commenting on the blog, and will be using Akismet and the standard comment moderation filters to ensure that spam comments or comments with an adult subject matter are not published and are not visible to the young students.
My proposed patch inserts some additional filters into the comment selection SQL on edit.php comments to ensure that unapproved comments are not selected if the current user cannot moderate_comments. I've only patched wp-admin/edit.php, which is the only place I can find where this problem exists.
Patch altering the comment selection SQL on edit.php to not return comments if user cannot moderate comments