Comments on private posts appear in dashboard

[PeteHoliday]

Comments added to private posts show up in the dashboard and sidebar widgets regardless of whether or not the user has permission to see the private posts or (in the case of the sidebar widget) is even logged in.

The sidebar widget just shows that the comment exists. In some situations, even the knowledge that the comment (and therefore the private post) exists can be detrimental. The dashboard problem is bigger, though, as the actual text of the comment is displayed.

This behavior appears in both 2.7 RC1 and 2.7 RC2.

[mrmist]

Confirmed. The same applies to the edit comment view, which really shouldn't show comments that are on private posts or not yet approved.

[DD32]

Bumping to 2.7.1

[mrmist]

#9144 has a patch so closing this one as dupe