# desktop-mode/0.8.7/includes/user-edit-window/permissions.php

OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin, version 0.8.7. 69 lines.

- Page: https://pluginprobe.com/plugins/desktop-mode/0.8.7/code/includes/user-edit-window/permissions.php
- Raw: https://pluginprobe.com/plugins/desktop-mode/0.8.7/raw/includes/user-edit-window/permissions.php
- Modified: 2026-05-08T19:30:26+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/desktop-mode/0.8.7/code/includes/user-edit-window/permissions.php#L10-L20`.

```php
<?php
/**
 * Desktop Mode — Native User Edit Window: capability gates.
 *
 * The window is registered for ANY logged-in user (everyone has a
 * profile they can edit). Per-target capability is re-checked at
 * REST time — saving uses core's `/wp/v2/users/<id>` PUT, which
 * already enforces `edit_user, $id`; the insights endpoint here
 * applies the same check before returning data.
 *
 * @package WPDesktopMode
 * @since   0.18.0
 */

defined( 'ABSPATH' ) || exit;

/**
 * Whether the user is eligible to have the User Edit window registered.
 *
 * Defaults to `true` for any logged-in user — everyone has at least
 * their own profile to edit. Returning `false` from the filter
 * disables registration entirely, which falls back to the classic
 * `user-edit.php` / `profile.php` iframe path.
 *
 * @since 0.18.0
 *
 * @param int|null $user_id Optional. Defaults to `get_current_user_id()`.
 * @return bool
 */
function desktop_mode_user_edit_window_user_can_register( $user_id = null ) {
	$user_id = null === $user_id ? get_current_user_id() : (int) $user_id;
	$can     = $user_id > 0;

	/**
	 * Filter whether the current user can have the User Edit window
	 * registered.
	 *
	 * @since 0.18.0
	 *
	 * @param bool $can     Default: any logged-in user.
	 * @param int  $user_id User being checked.
	 */
	return (bool) apply_filters(
		'desktop_mode_user_edit_window_user_can_register',
		$can,
		$user_id
	);
}

/**
 * Whether `$viewer_id` may edit `$target_id`'s profile. Server-side
 * canonical check used by the insights endpoint and any plugin code
 * that wants to mirror the gating.
 *
 * @since 0.18.0
 *
 * @param int $viewer_id
 * @param int $target_id
 * @return bool
 */
function desktop_mode_user_edit_window_can_edit( $viewer_id, $target_id ) {
	$viewer_id = (int) $viewer_id;
	$target_id = (int) $target_id;
	if ( $viewer_id <= 0 || $target_id <= 0 ) {
		return false;
	}
	return (bool) user_can( $viewer_id, 'edit_user', $target_id );
}

```