[wp-trac] [WordPress Trac] #25338: Comments of password-protected posts should not be shown to logged-in users without edit capability

WordPress Trac noreply at wordpress.org
Tue Sep 17 02:30:31 UTC 2013


#25338: Comments of password-protected posts should not be shown to logged-in users
without edit capability
--------------------------+-----------------------------
 Reporter:  kraftbj       |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Comments      |    Version:
 Severity:  normal        |   Keywords:
--------------------------+-----------------------------
 Currently, if an user creates a password-protected post, Authors and lower
 roles cannot view the post neither on the front end nor in the backend,
 unless it was their own post (or they have the password).

 However, they can see comments of those posts while viewing edit-
 comments.php.

 Suggested that comments of password-protected posts should not be
 displayed to users without ability to view/edit the post in the admin.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25338>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list