diff --git a/wp-admin/includes/dashboard.php b/wp-admin/includes/dashboard.php index d92c4b37a8..6955b54241 100644 --- a/wp-admin/includes/dashboard.php +++ b/wp-admin/includes/dashboard.php @@ -488,6 +488,10 @@ function wp_dashboard_quick_press() { $_REQUEST = array(); // hack for get_default_post_to_edit() } + if ( ! current_user_can( 'edit_posts' ) ) { + return; + } + /* Check if a new auto-draft (= no new post_ID) is needed or if the old can be used */ $last_post_id = (int) get_user_option( 'dashboard_quick_press_last_post_id' ); // Get the last post_ID if ( $last_post_id ) { diff --git a/wp-includes/capabilities.php b/wp-includes/capabilities.php index 91f0a6ac7a..788e79d0e1 100644 --- a/wp-includes/capabilities.php +++ b/wp-includes/capabilities.php @@ -1073,8 +1073,10 @@ function map_meta_cap( $cap, $user_id ) { case 'edit_post': case 'edit_page': $post = get_post( $args[0] ); - if ( empty( $post ) ) + if ( empty( $post ) ) { + $caps[] = 'do_not_allow'; break; + } if ( 'revision' == $post->post_type ) { $post = get_post( $post->post_parent );