From 761273807ae0e088f75dde5b69b99ff312e26a7a Mon Sep 17 00:00:00 2001
From: nacin <nacin@1a063a9b-81f0-0310-95a4-ce76da25c4cd>
Date: Thu, 7 Jun 2012 15:25:45 +0000
Subject: [PATCH] Call auth_redirect() for customize.php. props ocean90. fixes
 #20872.

git-svn-id: http://core.svn.wordpress.org/trunk@21019 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-includes/class-wp-customize-manager.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/wp-includes/class-wp-customize-manager.php b/wp-includes/class-wp-customize-manager.php
index 15a3508963..b05c0bfbcf 100644
--- a/wp-includes/class-wp-customize-manager.php
+++ b/wp-includes/class-wp-customize-manager.php
@@ -78,6 +78,9 @@ final class WP_Customize_Manager {
 	 * @since 3.4.0
 	 */
 	public function setup_theme() {
+		if ( is_admin() && ! defined( 'DOING_AJAX' ) )
+			auth_redirect();
+
 		send_origin_headers();
 
 		$this->original_stylesheet = get_stylesheet();