File: wp-includes/rest-api/endpoints/class-wp-rest-terms-controller.php. View all references

public function get_items_permissions_check( $request ) {
	$tax_obj = get_taxonomy( $this->taxonomy );

	if ( ! $tax_obj || ! $this->check_is_taxonomy_allowed( $this->taxonomy ) ) {
		return false;
	}

	if ( 'edit' === $request['context'] && ! current_user_can( $tax_obj->cap->edit_terms ) ) {
		return new WP_Error(
			'rest_forbidden_context',
			__( 'Sorry, you are not allowed to edit terms in this taxonomy.' ),
			array( 'status' => rest_authorization_required_code() )
		);
	}

	if ( ! empty( $request['post'] ) ) {
		$post = get_post( $request['post'] );

		if ( ! $post ) {
			return new WP_Error(
				'rest_post_invalid_id',
				__( 'Invalid post ID.' ),
				array(
					'status' => 400,
				)
			);
		}

		if ( ! $this->check_read_terms_permission_for_post( $post, $request ) ) {
			return new WP_Error(
				'rest_forbidden_context',
				__( 'Sorry, you are not allowed to view terms for this post.' ),
				array(
					'status' => rest_authorization_required_code(),
				)
			);
		}
	}

	return true;
}

View on Trac View on GitHub