Revisions: Change the capability needed to view revision diffs to `edit_post`.
Merge of [37779] to the 4.0 branch. Built from https://develop.svn.wordpress.org/branches/4.0@37802 git-svn-id: http://core.svn.wordpress.org/branches/4.0@37767 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
4c2ff51802
commit
e16790e7e2
|
@ -2541,7 +2541,7 @@ function wp_ajax_get_revision_diffs() {
|
|||
if ( ! $post = get_post( (int) $_REQUEST['post_id'] ) )
|
||||
wp_send_json_error();
|
||||
|
||||
if ( ! current_user_can( 'read_post', $post->ID ) )
|
||||
if ( ! current_user_can( 'edit_post', $post->ID ) )
|
||||
wp_send_json_error();
|
||||
|
||||
// Really just pre-loading the cache here.
|
||||
|
|
|
@ -63,7 +63,7 @@ default :
|
|||
if ( ! $post = get_post( $revision->post_parent ) )
|
||||
break;
|
||||
|
||||
if ( ! current_user_can( 'read_post', $revision->ID ) || ! current_user_can( 'read_post', $post->ID ) )
|
||||
if ( ! current_user_can( 'read_post', $revision->ID ) || ! current_user_can( 'edit_post', $revision->post_parent ) )
|
||||
break;
|
||||
|
||||
// Revisions disabled and we're not looking at an autosave
|
||||
|
|
Loading…
Reference in New Issue