From 9bb224cf1e7020abe24b2be3ca807948d321a5b1 Mon Sep 17 00:00:00 2001
From: ryan <ryan@1a063a9b-81f0-0310-95a4-ce76da25c4cd>
Date: Sat, 1 Aug 2009 21:58:59 +0000
Subject: [PATCH] Add some CYA cap checks.

git-svn-id: http://svn.automattic.com/wordpress/trunk@11763 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-admin/edit-comments.php | 3 +++
 wp-admin/edit-pages.php    | 3 +++
 wp-admin/edit.php          | 3 +++
 3 files changed, 9 insertions(+)

diff --git a/wp-admin/edit-comments.php b/wp-admin/edit-comments.php
index de907cf06..4dfcdd679 100644
--- a/wp-admin/edit-comments.php
+++ b/wp-admin/edit-comments.php
@@ -9,6 +9,9 @@
 /** WordPress Administration Bootstrap */
 require_once('admin.php');
 
+if ( !current_user_can('edit_posts') )
+	wp_die(__('Cheatin&#8217; uh?'));
+
 wp_enqueue_script('admin-comments');
 enqueue_comment_hotkeys_js();
 
diff --git a/wp-admin/edit-pages.php b/wp-admin/edit-pages.php
index 8c47cfb2d..032636fb9 100644
--- a/wp-admin/edit-pages.php
+++ b/wp-admin/edit-pages.php
@@ -9,6 +9,9 @@
 /** WordPress Administration Bootstrap */
 require_once('admin.php');
 
+if ( !current_user_can('edit_pages') )
+	wp_die(__('Cheatin&#8217; uh?'));
+
 // Handle bulk actions
 if ( isset($_GET['doaction']) || isset($_GET['doaction2']) || isset($_GET['delete_all']) || isset($_GET['delete_all2']) ) {
 	check_admin_referer('bulk-pages');
diff --git a/wp-admin/edit.php b/wp-admin/edit.php
index 12cd94e0d..fe4b5780b 100644
--- a/wp-admin/edit.php
+++ b/wp-admin/edit.php
@@ -9,6 +9,9 @@
 /** WordPress Administration Bootstrap */
 require_once('admin.php');
 
+if ( !current_user_can('edit_posts') )
+	wp_die(__('Cheatin&#8217; uh?'));
+
 // Back-compat for viewing comments of an entry
 if ( $_redirect = intval( max( @$_GET['p'], @$_GET['attachment_id'], @$_GET['page_id'] ) ) ) {
 	wp_redirect( admin_url('edit-comments.php?p=' . $_redirect ) );