WP_REST_URL_Details_Controller::permissions_check() WordPress Method
The WP_REST_URL_Details_Controller::permissions_check() method is used to check if the current user has the required permissions to access a REST API URL. This is typically called before any other methods in the class are invoked. If the user does not have the required permissions, a WP_Error instance is returned.
WP_REST_URL_Details_Controller::permissions_check() #
Checks whether a given request has permission to read remote URLs.
Return
(WP_Error|bool) True if the request has permission, else WP_Error.
Source
File: wp-includes/rest-api/endpoints/class-wp-rest-url-details-controller.php
public function permissions_check() {
if ( current_user_can( 'edit_posts' ) ) {
return true;
}
foreach ( get_post_types( array( 'show_in_rest' => true ), 'objects' ) as $post_type ) {
if ( current_user_can( $post_type->cap->edit_posts ) ) {
return true;
}
}
return new WP_Error(
'rest_cannot_view_url_details',
__( 'Sorry, you are not allowed to process remote URLs.' ),
array( 'status' => rest_authorization_required_code() )
);
}
Expand full source codeCollapse full source codeView on TracView on GitHub
Changelog
| Version | Description |
|---|---|
| 5.9.0 | Introduced. |