From 4c43e714783612d5a5ff8454cf1dfa5d652c10e6 Mon Sep 17 00:00:00 2001
From: Sergey Biryukov <sergeybiryukov.ru@gmail.com>
Date: Thu, 3 May 2018 06:52:21 +0000
Subject: [PATCH] REST API: When handling `who=authors` query parameter for
 `GET wp/v2/users`, only check `edit_posts` for post types that support
 `author`.

Props danielbachhuber.
Fixes #42202.
Built from https://develop.svn.wordpress.org/trunk@43137


git-svn-id: http://core.svn.wordpress.org/trunk@42966 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 .../rest-api/endpoints/class-wp-rest-users-controller.php      | 3 ++-
 wp-includes/version.php                                        | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php b/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php
index c452b30472..a9aff62651 100644
--- a/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php
+++ b/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php
@@ -196,7 +196,8 @@ class WP_REST_Users_Controller extends WP_REST_Controller {
 			$can_view = false;
 			$types = get_post_types( array( 'show_in_rest' => true ), 'objects' );
 			foreach ( $types as $type ) {
-				if ( current_user_can( $type->cap->edit_posts ) ) {
+				if ( post_type_supports( $type->name, 'author' )
+					&& current_user_can( $type->cap->edit_posts ) ) {
 					$can_view = true;
 				}
 			}
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 5afe8dcd5b..de343553ce 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -4,7 +4,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '5.0-alpha-43135';
+$wp_version = '5.0-alpha-43137';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.