[wp-trac] [WordPress Trac] #55659: User without post lock can overwrite changes of user with lock via autosave

[WordPress Trac]

#55659: User without post lock can overwrite changes of user with lock via autosave
--------------------------------------+------------------------------
 Reporter:  jhart35                   |       Owner:  adamsilverstein
     Type:  defect (bug)              |      Status:  assigned
 Priority:  normal                    |   Milestone:  6.1
Component:  Autosave                  |     Version:  5.9.3
 Severity:  normal                    |  Resolution:
 Keywords:  has-patch has-unit-tests  |     Focuses:  rest-api
--------------------------------------+------------------------------

Comment (by joemcgill):

 Was showing this to @kadamwhite and @TimothyBlynJacobs at WCUS contributor
 day and we were able to confirm the bug. As @adamsilverstein mentioned
 earlier, I think it's debatable whether this is the responsibility of the
 REST controller or if it should be the responsibility of the editor to
 disable autosaves, but this seems like a valid approach.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/55659#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform