endpoint, [ [ 'methods' => WP_REST_Server::DELETABLE, 'callback' => [$this, 'handleRequest'], 'permission_callback' => [$this, 'permissionsCheck'], ], 'args' => [ 'ids' => [ 'type' => 'string', 'required' => true, 'validate_callback' => function ($ids) { foreach ($this->splitString($ids) as $id) { if ( ! filter_var($id, FILTER_VALIDATE_INT)) { return false; } } return true; }, ], ], ] ); } /** * @since 4.0.0 * * @throws Exception */ public function handleRequest(WP_REST_Request $request): WP_Rest_Response { $ids = $this->splitString($request->get_param('ids')); $errors = []; $successes = []; foreach ($ids as $id) { $campaignDeleted = give(CampaignRepository::class)->getById($id)->delete(); $campaignDeleted ? $successes[] = $id : $errors[] = $id; } return new WP_REST_Response(['errors' => $errors, 'successes' => $successes]); } /** * Split string * * @since 4.0.0 * * @return string[] */ protected function splitString(string $ids): array { if (strpos($ids, ',')) { return array_map('trim', explode(',', $ids)); } return [trim($ids)]; } /** * @since 4.14.0 update permission capability to use facade * @since 4.3.1 update permissions * @since 4.0.0 * * @return bool|WP_Error */ public function permissionsCheck() { return UserPermissions::campaigns()->canDelete() ?: new WP_Error( 'rest_forbidden', __("You don't have permission to delete Campaigns", 'give'), ['status' => is_user_logged_in() ? 403 : 401] ); } }