[wp-trac] [WordPress Trac] #10904: Contributors can see titles of the pending posts and comments in their admin

WordPress Trac wp-trac at lists.automattic.com
Mon Oct 5 04:25:20 UTC 2009


#10904: Contributors can see titles of the pending posts and comments in their
admin
-----------------------------+----------------------------------------------
 Reporter:  sg11111          |       Owner:              
     Type:  defect (bug)     |      Status:  new         
 Priority:  high             |   Milestone:  2.8.5       
Component:  Role/Capability  |     Version:  2.8.4       
 Severity:  critical         |    Keywords:  contributors
-----------------------------+----------------------------------------------
 Greetings. I think this is a serious privacy issue which should be fixed
 asap. I want to give contributor rights for all users on my blog to post
 for promoting participation on the blog. But when I give contributor
 rights, they can even see the titles of the pending unapproved posts and
 comments in their admin. I think such a capability should only be given to
 moderator and above or even authors and above but not to contributors as
 contributors don't want to know about how the blog is moderated or which
 spam comments are rejected etc. Kindly do fix this in 2.8.5. Thank you.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10904>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list