Author has deleted a page of comments

Depends on the role assigned to the person who deleted them. If he/she is admin, they can do anything.

The person was an author, not an admin.

Here’s some proof when logged in as a newly created author:

https://img103.imageshack.us/img103/5927/commentsbugne3.jpg

As you can see, although the individual check boxes and moderate links are hidden, the ‘all on this page’ checkbox isn’t, as well as the delete button. So if someone wants to delete a single one they can’t, and so could mistakenly try and mass delete one.

I think its because an Author can “edit posts” it allows them to delete comments as a result. See here

https://codex.www.ads-software.com/Roles_and_Capabilities#level_10

It says there it will only allow them to moderate their own comments. This bug has enabled them to delete a page of comments rather than a single comment.

Sorry I dont know much more, I just read that edit_posts gives Author user access to do the following

Manage > Comments — The “show post”, “edit post”, “edit comment”, and “delete comment” links are enabled only on own posts, since edit-comment.php looks for “current_user_can(‘edit_post’, $comment->comment_post_ID)”‘

This is quite a serious bug.

Is it just my install??