| @@ -547,14 +547,10 @@ | ||
| 547 | 547 | 'last_name' => $user->user_lastname, |
| 548 | 548 | 'nice_name' => $user->user_nicename, |
| 549 | 549 | 'display_name' => $user->display_name, |
| 550 | 550 | 'roles' => array_values( $user->roles ), |
| 551 | - // Raw grants (role + user), the same vocabulary the POS Access settings | |
| 552 | - // screen reads and writes. user_can() is wrong here: the singular meta | |
| 553 | - // caps (edit_product, delete_product) cannot be checked without a post. | |
| 554 | - 'capabilities' => array_values( | |
| 555 | - array_filter( Access_Section::capability_names(), fn( $cap ) => ! empty( $user->allcaps[ $cap ] ) ) | |
| 556 | - ), | |
| 551 | + // The helper reports effective grants, including role-editor denies. | |
| 552 | + 'capabilities' => Access_Section::effective_capabilities( $user ), | |
| 557 | 553 | 'avatar_url' => get_avatar_url( $user->ID ), |
| 558 | 554 | // Token data. |
| 559 | 555 | 'access_token' => $tokens['access_token'], |
| 560 | 556 | 'refresh_token' => $tokens['refresh_token'], |
