File: wp-includes/rest-api/endpoints/class-wp-rest-block-renderer-controller.php. View all references

public function get_item_permissions_check( $request ) {
	global $post;

	$post_id = isset( $request['post_id'] ) ? (int) $request['post_id'] : 0;

	if ( $post_id > 0 ) {
		$post = get_post( $post_id );

		if ( ! $post || ! current_user_can( 'edit_post', $post->ID ) ) {
			return new WP_Error(
				'block_cannot_read',
				__( 'Sorry, you are not allowed to read blocks of this post.' ),
				array(
					'status' => rest_authorization_required_code(),
				)
			);
		}
	} else {
		if ( ! current_user_can( 'edit_posts' ) ) {
			return new WP_Error(
				'block_cannot_read',
				__( 'Sorry, you are not allowed to read blocks as this user.' ),
				array(
					'status' => rest_authorization_required_code(),
				)
			);
		}
	}

	return true;
}

View on Trac View on GitHub