← All changes
|
app/Controllers/AvailabilitySpecificDatesController.php
+5
-2
3.0.2.9
→
3.0.16
View file →
| @@ -574,8 +574,11 @@ | ||
| 574 | 574 | * @return bool Permission status |
| 575 | 575 | */ |
| 576 | 576 | public function checkPermission(\WP_REST_Request $request): bool |
| 577 | 577 | { |
| 578 | - // Check if user has capability to manage trips | |
| 579 | - return current_user_can('manage_yatra_trips') || current_user_can('manage_options'); | |
| 578 | + // Trip-writes cap covers every endpoint on this controller — | |
| 579 | + // managing specific override dates, price overrides, and booking | |
| 580 | + // counts all mutate trip availability. WP admins pass via the | |
| 581 | + // Team module's admin-fallback filter. | |
| 582 | + return current_user_can('yatra_edit_trips'); | |
| 580 | 583 | } |
| 581 | 584 | } |