Title: WP_REST_Menus_Controller::check_has_read_only_access
Published: February 3, 2022
Last modified: May 20, 2026

---

# WP_REST_Menus_Controller::check_has_read_only_access( WP_REST_Request $request ): true|󠀁[WP_Error](https://developer.wordpress.org/reference/classes/wp_error/)󠁿

## In this article

 * [Description](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#description)
 * [Parameters](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#parameters)
 * [Return](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#return)
 * [Source](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#source)
 * [Hooks](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#hooks)
 * [Related](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#related)
 * [Changelog](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#changelog)

[ Back to top](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#wp--skip-link--target)

Checks whether the current user has read permission for the endpoint.

## 󠀁[Description](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#description)󠁿

This allows for any user that can `edit_theme_options` or edit any REST API available
post type.

## 󠀁[Parameters](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#parameters)󠁿

 `$request`[WP_REST_Request](https://developer.wordpress.org/reference/classes/wp_rest_request/)
required

Full details about the request.

## 󠀁[Return](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#return)󠁿

 true|[WP_Error](https://developer.wordpress.org/reference/classes/wp_error/) True
if the current user has permission, [WP_Error](https://developer.wordpress.org/reference/classes/wp_error/)
object otherwise.

## 󠀁[Source](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#source)󠁿

    ```php
    protected function check_has_read_only_access( $request ) {
    	/** This filter is documented in wp-includes/rest-api/endpoints/class-wp-rest-menu-items-controller.php */
    	$read_only_access = apply_filters( 'rest_menu_read_access', false, $request, $this );
    	if ( $read_only_access ) {
    		return true;
    	}

    	if ( current_user_can( 'edit_theme_options' ) ) {
    		return true;
    	}

    	if ( current_user_can( 'edit_posts' ) ) {
    		return true;
    	}

    	foreach ( get_post_types( array( 'show_in_rest' => true ), 'objects' ) as $post_type ) {
    		if ( current_user_can( $post_type->cap->edit_posts ) ) {
    			return true;
    		}
    	}

    	return new WP_Error(
    		'rest_cannot_view',
    		__( 'Sorry, you are not allowed to view menus.' ),
    		array( 'status' => rest_authorization_required_code() )
    	);
    }
    ```

[View all references](https://developer.wordpress.org/reference/files/wp-includes/rest-api/endpoints/class-wp-rest-menus-controller.php/)
[View on Trac](https://core.trac.wordpress.org/browser/tags/7.0/src/wp-includes/rest-api/endpoints/class-wp-rest-menus-controller.php#L86)
[View on GitHub](https://github.com/WordPress/wordpress-develop/blob/7.0/src/wp-includes/rest-api/endpoints/class-wp-rest-menus-controller.php#L86-L112)

## 󠀁[Hooks](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#hooks)󠁿

 [apply_filters( ‘rest_menu_read_access’, bool $read_only_access, WP_REST_Request $request, WP_REST_Controller $controller )](https://developer.wordpress.org/reference/hooks/rest_menu_read_access/)

Filters whether the current user has read access to menu items via the REST API.

## 󠀁[Related](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#related)󠁿

| Uses | Description | 
| [rest_authorization_required_code()](https://developer.wordpress.org/reference/functions/rest_authorization_required_code/)`wp-includes/rest-api.php` |

Returns a contextual HTTP error code for authorization failure.

  | 
| [current_user_can()](https://developer.wordpress.org/reference/functions/current_user_can/)`wp-includes/capabilities.php` |

Returns whether the current user has the specified capability.

  | 
| [__()](https://developer.wordpress.org/reference/functions/__/)`wp-includes/l10n.php` |

Retrieves the translation of $text.

  | 
| [apply_filters()](https://developer.wordpress.org/reference/functions/apply_filters/)`wp-includes/plugin.php` |

Calls the callback functions that have been added to a filter hook.

  | 
| [get_post_types()](https://developer.wordpress.org/reference/functions/get_post_types/)`wp-includes/post.php` |

Gets a list of all registered post type objects.

  | 
| [WP_Error::__construct()](https://developer.wordpress.org/reference/classes/wp_error/__construct/)`wp-includes/class-wp-error.php` |

Initializes the error.

  |

[Show 4 more](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#)
[Show less](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#)

| Used by | Description | 
| [WP_REST_Menus_Controller::get_items_permissions_check()](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/get_items_permissions_check/)`wp-includes/rest-api/endpoints/class-wp-rest-menus-controller.php` |

Checks if a request has access to read menus.

  | 
| [WP_REST_Menus_Controller::get_item_permissions_check()](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/get_item_permissions_check/)`wp-includes/rest-api/endpoints/class-wp-rest-menus-controller.php` |

Checks if a request has access to read or edit the specified menu.

  |

## 󠀁[Changelog](https://developer.wordpress.org/reference/classes/wp_rest_menus_controller/check_has_read_only_access/?output_format=md#changelog)󠁿

| Version | Description | 
| [5.9.0](https://developer.wordpress.org/reference/since/5.9.0/) | Introduced. |

## User Contributed Notes

You must [log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fdeveloper.wordpress.org%2Freference%2Fclasses%2Fwp_rest_menus_controller%2Fcheck_has_read_only_access%2F)
before being able to contribute a note or feedback.