← All changes | includes/API/API.php +19 -2 3.0.3 → 3.3.0 View file →

		@@ -124,12 +124,29 @@
124	124	* @param $request WP_REST_Request for getting all route request in time.
125	125	*
126	126	* @return WP_Error|boolean
127	127	*/
	128	+ public function _permission_check( WP_REST_Request $request ) {
	129	+ $this->request = $request;
	130	+ if(!current_user_can('delete_posts')){
	131	+ return false;
	132	+ }
	133	+
	134	+ add_filter('wp_redirect', '__return_false', 999);
	135	+
	136	+ return $this->permission_check( $request );
	137	+ }
	138	+
	139	+ /**
	140	+ * @param $request WP_REST_Request for getting all route request in time.
	141	+ *
	142	+ * @return WP_Error|boolean
	143	+ */
128	144	public function permission_check( WP_REST_Request $request ) {
129	145	$this->request = $request;
130	146	$this->api_key = $this->utils('options')->get( 'api_key' );
131	147
	148	+
132	149	if ( ! empty( $this->api_key ) ) {
133	150	return true;
134	151	}
135	152
		@@ -163,9 +180,9 @@
163	180	->remove('reviews')
164	181	->remove('cloud_activity')
165	182	->remove('api_key');
166	183
167		- if( $this->utils('options')->whoami() === 'global' ) {
	184	+ if( $this->utils('options')->who_am_i() === 'global' ) {
168	185	$this->utils('options')->remove_global_login();
169	186	}
170	187
171	188	return new WP_Error( 'invalid_api_key', $message, $_additional_data );
		@@ -184,9 +201,9 @@
184	201	$endpoint,
185	202	[
186	203	'methods' => $methods,
187	204	'callback' => $callback,
188		- 'permission_callback' => [ $this, 'permission_check' ],
	205	+ 'permission_callback' => [ $this, '_permission_check' ],
189	206	'args' => $args,
190	207	]
191	208	);
192	209	}