diff --git a/wp-admin/includes/post.php b/wp-admin/includes/post.php
index 9b84df03d..5f8b6fd0f 100644
--- a/wp-admin/includes/post.php
+++ b/wp-admin/includes/post.php
@@ -299,8 +299,9 @@ function bulk_edit_posts( $post_data = null ) {
 
 	$updated = $skipped = $locked = array();
 	foreach ( $post_IDs as $post_ID ) {
+		$post_type_object = get_post_type_object( get_post_type( $post_ID ) );
 
-		if ( isset($children) && in_array($post_ID, $children) ) {
+		if ( !isset( $post_type_object ) || ( isset($children) && in_array($post_ID, $children) ) || !current_user_can( $post_type_object->cap->edit_post, $post_ID ) ) {
 			$skipped[] = $post_ID;
 			continue;
 		}
diff --git a/wp-admin/includes/template.php b/wp-admin/includes/template.php
index 9a9fde27a..ec1d6c40b 100644
--- a/wp-admin/includes/template.php
+++ b/wp-admin/includes/template.php
@@ -1529,7 +1529,7 @@ foreach ( $posts_columns as $column_name => $column_display_name ) {
 
 	case 'cb':
 		?>
-		<th scope="row" class="check-column"><input type="checkbox" name="post[]" value="<?php the_ID(); ?>" /></th>
+		<th scope="row" class="check-column"><?php if ( current_user_can( $post_type_object->cap->edit_post, $page->ID ) ) { ?><input type="checkbox" name="post[]" value="<?php the_ID(); ?>" /><?php } ?></th>
 		<?php
 		break;
 	case 'date':