[wp-trac] [WordPress Trac] #64183: Mixed attachment permission when two posts are using it

WordPress Trac noreply at wordpress.org
Thu Mar 12 20:48:17 UTC 2026


#64183: Mixed attachment permission when two posts are using it
--------------------------------------------+------------------------------
 Reporter:  bor0                            |       Owner:  johnjamesjacoby
     Type:  defect (bug)                    |      Status:  closed
 Priority:  normal                          |   Milestone:  7.0
Component:  REST API                        |     Version:  6.9
 Severity:  normal                          |  Resolution:  fixed
 Keywords:  has-patch has-unit-tests early  |     Focuses:  rest-api
--------------------------------------------+------------------------------
Changes (by johnjamesjacoby):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 In [changeset:"61996" 61996]:
 {{{
 #!CommitTicketReference repository="" revision="61996"
 REST API: Prevent inaccessible attachments from being embedded in posts.

 When an attachment is used by multiple posts, it could be included in
 `_embed` for a published post even if its `post_parent` is a draft.

 This commit avoids embedding attachments that are not viewable in this
 context.

 Props bor0.

 Fixes #64183.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64183#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list