← All changes
|
includes/API/V2/Proxy/Coupons_Proxy_Behavior.php
+9
-6
1.10.25
→
1.10.17
View file →
| @@ -10,14 +10,8 @@ | ||
| 10 | 10 | /** |
| 11 | 11 | * Relaxes WooCommerce coupon read permission only during the forward. |
| 12 | 12 | */ |
| 13 | 13 | final class Coupons_Proxy_Behavior extends Scoped_Proxy_Behavior { |
| 14 | - /** POS read grant for this collection only. | |
| 15 | - * | |
| 16 | - * @var string | |
| 17 | - */ | |
| 18 | - protected $permission_collection = 'coupons'; | |
| 19 | - | |
| 20 | 14 | /** |
| 21 | 15 | * Install this resource's hooks and return their removal tuples. |
| 22 | 16 | * |
| 23 | 17 | * @return array<int, array{0: string, 1: callable, 2: int}> |
| @@ -22,9 +16,17 @@ | ||
| 22 | 16 | * |
| 23 | 17 | * @return array<int, array{0: string, 1: callable, 2: int}> |
| 24 | 18 | */ |
| 25 | 19 | protected function install(): array { |
| 20 | + $filter = static function ( $permission, $context, $object_id, $post_type ) { | |
| 21 | + if ( ! $permission && 'shop_coupon' === $post_type && 'read' === $context ) { | |
| 22 | + $permission = current_user_can( 'access_woocommerce_pos' ); | |
| 23 | + } | |
| 26 | 24 | |
| 25 | + return $permission; | |
| 26 | + }; | |
| 27 | + add_filter( 'woocommerce_rest_check_permissions', $filter, 10, 4 ); | |
| 28 | + | |
| 27 | 29 | // Coupon date/modified sorts tie routinely (imports share timestamps); |
| 28 | 30 | // pin the id tiebreak so multi-page walks stay stable (see Stable_Sort). |
| 29 | 31 | $stable_sort = static function ( $args ) { |
| 30 | 32 | return Stable_Sort::with_post_id_tiebreak( (array) $args ); |
| @@ -31,8 +33,9 @@ | ||
| 31 | 33 | }; |
| 32 | 34 | add_filter( 'woocommerce_rest_shop_coupon_object_query', $stable_sort ); |
| 33 | 35 | |
| 34 | 36 | return array( |
| 37 | + array( 'woocommerce_rest_check_permissions', $filter, 10 ), | |
| 35 | 38 | array( 'woocommerce_rest_shop_coupon_object_query', $stable_sort, 10 ), |
| 36 | 39 | ); |
| 37 | 40 | } |
| 38 | 41 | } |