Changeset 5074

Timestamp:

03/21/07 22:15:20 (1 year ago)

Author:

ryan

Message:

Check for publish caps when editing via xmlrpc.

Files:

• trunk/xmlrpc.php (modified) (4 diffs)

trunk/xmlrpc.php

@@ -847 +847 @@
-      extract($actual_post);
-
+      if ( ('publish' == $post_status) && !current_user_can('publish_posts') )
+        return new IXR_Error(401, 'Sorry, you do not have the right to publish this post.');
+
-      $post_title = xmlrpc_getposttitle($content);
-      $post_category = xmlrpc_getpostcategory($content);
@@ -1073 +1076 @@
-
-      set_current_user(0, $user_login);
-      if ( !current_user_can('edit_post', $post_ID) )
-        return new IXR_Error(401, 'Sorry, you can not edit this post.');
-
-      $postdata = wp_get_single_post($post_ID, ARRAY_A);
-      extract($postdata);
-        $this->escape($postdata);
-
-        // The post_type defaults to post, but could also be page.
@@ -1088 +1085 @@
-            $post_type = "page";
-        }
+
+      // Edit page caps are checked in editPage.  Just check post here.
+      if ( ( 'post' == $post_type ) && !current_user_can('edit_post', $post_ID) )
+        return new IXR_Error(401, 'Sorry, you can not edit this post.');
+
+      $postdata = wp_get_single_post($post_ID, ARRAY_A);
+      extract($postdata);
+        $this->escape($postdata);
-
-        // Let WordPress manage slug if none was provided.
@@ -1159 +1164 @@
-      $post_more = $content_struct['mt_text_more'];
-      $post_status = $publish ? 'publish' : 'draft';
+
+      if ( ('publish' == $post_status) ) {
+        if ( ( 'page' == $post_type ) && !current_user_can('publish_pages') )
+            return new IXR_Error(401, 'Sorry, you do not have the right to publish this page.');
+        else if ( !current_user_can('publish_posts') )
+            return new IXR_Error(401, 'Sorry, you do not have the right to publish this post.');
+      }
-
-      if ($post_more) {