[wp-trac] [WordPress Trac] #47024: (Comments REST API) Contributor can't update/delete own comment

WordPress Trac noreply at wordpress.org
Tue Oct 8 03:56:15 UTC 2019


#47024: (Comments REST API) Contributor can't update/delete own comment
---------------------------------------------+-------------------------
 Reporter:  meloniq                          |       Owner:  kadamwhite
     Type:  defect (bug)                     |      Status:  accepted
 Priority:  normal                           |   Milestone:  5.3
Component:  REST API                         |     Version:  5.1.1
 Severity:  normal                           |  Resolution:
 Keywords:  has-patch commit has-unit-tests  |     Focuses:  rest-api
---------------------------------------------+-------------------------
Changes (by kadamwhite):

 * keywords:  has-patch needs-unit-tests commit => has-patch commit has-
     unit-tests


Comment:

 After implementing tests, I successfully demonstrated that the condition
 this patch changes did not previously permit any `moderate_comments` users
 (not just the post author) from editing an existing comment, despite
 several places in core comments code where we treat `moderate_comments` as
 synonymous with admin-level privileges. I've added a test to validate that
 a user with `moderate_comments` is permitted to do just that.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47024#comment:12>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list