Die if user doesn't have caps for the post type. Props duck_. fixes #15259

git-svn-id: http://svn.automattic.com/wordpress/trunk@16135 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2010-11-01 16:28:35 +00:00
parent 70295ae440
commit de0188c661
1 changed files with 6 additions and 19 deletions

View File

@ -30,27 +30,14 @@ $title = $post_type_object->labels->add_new_item;
$editing = true;
if ( 'post' == $post_type && !current_user_can('edit_posts') ) {
include('./admin-header.php'); ?>
<div class="wrap">
<p><?php printf(__('Since you&#8217;re a newcomer, you&#8217;ll have to wait for an admin to add the <code>edit_posts</code> capability to your user, in order to be authorized to post.<br />
You can also <a href="mailto:%s?subject=Promotion?">e-mail the admin</a> to ask for a promotion.<br />
When you&#8217;re promoted, just reload this page and you&#8217;ll be able to blog. :)'), get_option('admin_email')); ?>
</p>
</div>
<?php
include('./admin-footer.php');
exit();
}
if ( ! current_user_can( $post_type_object->cap->edit_posts ) )
wp_die( __( 'Cheatin&#8217; uh?' ) );
wp_enqueue_script('autosave');
// Show post form.
if ( current_user_can($post_type_object->cap->edit_posts) ) {
$post = get_default_post_to_edit( $post_type, true );
$post_ID = $post->ID;
include('edit-form-advanced.php');
}
$post = get_default_post_to_edit( $post_type, true );
$post_ID = $post->ID;
include('edit-form-advanced.php');
include('./admin-footer.php');
?>
?>