WP_REST_Templates_Controller::get_items_permissions_check() – Method

WP_REST_Templates_Controller::get_items_permissions_check( WP_REST_Request $request ): true|WP_Error

Checks if a given request has access to read templates.

Parameters

$requestWP_REST_Requestrequired: Full details about the request.

Return

true|WP_Error True if the request has read access, WP_Error object otherwise.

Source

public function get_items_permissions_check( $request ) {
	if ( current_user_can( 'edit_posts' ) ) {
		return true;
	}
	foreach ( get_post_types( array( 'show_in_rest' => true ), 'objects' ) as $post_type ) {
		if ( current_user_can( $post_type->cap->edit_posts ) ) {
			return true;
		}
	}

	return new WP_Error(
		'rest_cannot_manage_templates',
		__( 'Sorry, you are not allowed to access the templates on this site.' ),
		array(
			'status' => rest_authorization_required_code(),
		)
	);
}

View all references View on Trac View on GitHub

Uses	Description
rest_authorization_required_code()`wp-includes/rest-api.php`	Returns a contextual HTTP error code for authorization failure.
current_user_can()`wp-includes/capabilities.php`	Returns whether the current user has the specified capability.
get_post_types()`wp-includes/post.php`	Gets a list of all registered post type objects.
WP_Error::__construct()`wp-includes/class-wp-error.php`	Initializes the error.

Show 2 more Show less

Changelog

Version	Description
6.6.0	Allow users with edit_posts capability to read templates.
5.8.0	Introduced.

User Contributed Notes

You must log in before being able to contribute a note or feedback.