Fix capability checks, update capability for post_restrictions #3243
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
All Submissions:
Changes proposed in this Pull Request:
Fixes issue where most REST API endpoints would be restricted to
pmpro_edit_members
(see change from$permission = current_user_can( $permission );
to$permission = current_user_can( $permission_to_check );
)Also updates the
post_restrictions
endpoint to check whether the current user can edit the specific post being updated.Alternative to #3238
Resolves #3215
Other information:
Changelog entry