From 5fcd7483ea09e0649b97f8df63f5381b95113d87 Mon Sep 17 00:00:00 2001 From: Ryan Boren Date: Mon, 4 Jun 2007 18:31:32 +0000 Subject: [PATCH] Add 'edit_posts' capability check to metaWeblog.newPost. Props Joseph Scott and Wei-Yeh Lee. fixes #4404 for 2.3 git-svn-id: https://develop.svn.wordpress.org/trunk@5651 602fd350-edb4-49c9-b593-d223f7449a82 --- xmlrpc.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/xmlrpc.php b/xmlrpc.php index 1cd413edf3..a329c328e0 100644 --- a/xmlrpc.php +++ b/xmlrpc.php @@ -925,8 +925,9 @@ class wp_xmlrpc_server extends IXR_Server { return $this->error; } + $cap = ($publish) ? 'publish_posts' : 'edit_posts'; $user = set_current_user(0, $user_login); - if ( !current_user_can('publish_posts') ) + if ( !current_user_can($cap) ) return new IXR_Error(401, __('Sorry, you can not post on this weblog or category.')); // The post_type defaults to post, but could also be page.