← All changes | json-endpoints/class.wpcom-json-api-get-media-v1-1-endpoint.php +3 -3 16.3 → 16.3-beta View file →

		@@ -75,11 +75,11 @@
75	75	if ( defined( 'IS_WPCOM' ) && IS_WPCOM ) {
76	76	$this->load_theme_functions();
77	77	}
78	78
79		- $permission = $this->check_media_item_read_permission( $media_id );
80		- if ( is_wp_error( $permission ) ) {
81		- return $permission;
	79	+ // upload_files can probably be used for other endpoints but we want contributors to be able to use media too.
	80	+ if ( ! current_user_can( 'edit_posts', $media_id ) ) {
	81	+ return new WP_Error( 'unauthorized', 'User cannot view media', 403 );
82	82	}
83	83
84	84	return $this->get_media_item_v1_1( $media_id );
85	85	}