From 7b8c4df9bcde958818290b89324fcc3c6e034ca0 Mon Sep 17 00:00:00 2001
From: Ryan Boren <ryan@git.wordpress.org>
Date: Sat, 1 Aug 2009 21:58:59 +0000
Subject: [PATCH] Add some CYA cap checks.

git-svn-id: https://develop.svn.wordpress.org/trunk@11763 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/edit-comments.php | 3 +++
 wp-admin/edit-pages.php    | 3 +++
 wp-admin/edit.php          | 3 +++
 3 files changed, 9 insertions(+)

diff --git a/wp-admin/edit-comments.php b/wp-admin/edit-comments.php
index de907cf067..4dfcdd6794 100644
--- a/wp-admin/edit-comments.php
+++ b/wp-admin/edit-comments.php
@@ -9,6 +9,9 @@
 /** WordPress Administration Bootstrap */
 require_once('admin.php');
 
+if ( !current_user_can('edit_posts') )
+	wp_die(__('Cheatin&#8217; uh?'));
+
 wp_enqueue_script('admin-comments');
 enqueue_comment_hotkeys_js();
 
diff --git a/wp-admin/edit-pages.php b/wp-admin/edit-pages.php
index 8c47cfb2dc..032636fb9d 100644
--- a/wp-admin/edit-pages.php
+++ b/wp-admin/edit-pages.php
@@ -9,6 +9,9 @@
 /** WordPress Administration Bootstrap */
 require_once('admin.php');
 
+if ( !current_user_can('edit_pages') )
+	wp_die(__('Cheatin&#8217; uh?'));
+
 // Handle bulk actions
 if ( isset($_GET['doaction']) || isset($_GET['doaction2']) || isset($_GET['delete_all']) || isset($_GET['delete_all2']) ) {
 	check_admin_referer('bulk-pages');
diff --git a/wp-admin/edit.php b/wp-admin/edit.php
index 12cd94e0d5..fe4b5780b8 100644
--- a/wp-admin/edit.php
+++ b/wp-admin/edit.php
@@ -9,6 +9,9 @@
 /** WordPress Administration Bootstrap */
 require_once('admin.php');
 
+if ( !current_user_can('edit_posts') )
+	wp_die(__('Cheatin&#8217; uh?'));
+
 // Back-compat for viewing comments of an entry
 if ( $_redirect = intval( max( @$_GET['p'], @$_GET['attachment_id'], @$_GET['page_id'] ) ) ) {
 	wp_redirect( admin_url('edit-comments.php?p=' . $_redirect ) );