Media: Ensure the attachment parent is accessible to the user before showing a link to it in the media manager.

Props johnbillion, peterwilsoncc.


git-svn-id: https://develop.svn.wordpress.org/trunk@61884 602fd350-edb4-49c9-b593-d223f7449a82

Author: johnbillion

src/wp-includes/media.php

@@ -4568,7 +4568,7 @@ function wp_prepare_attachment_for_js( $attachment ) {
 
 	if ( $attachment->post_parent ) {
 		$post_parent = get_post( $attachment->post_parent );
-		if ( $post_parent ) {
+		if ( $post_parent && current_user_can( 'read_post', $attachment->post_parent ) ) {
 			$response['uploadedToTitle'] = $post_parent->post_title ? $post_parent->post_title : __( '(no title)' );
 			$response['uploadedToLink']  = get_edit_post_link( $attachment->post_parent, 'raw' );
 		}