LLMS_REST_Posts_Controller::sanitize_post_statuses( string|array $statuses, WP_REST_Request $request, string $parameter )
Sanitizes and validates the list of post statuses, including whether the user can query private statuses
Description Description
Heavily based on the WordPress WP_REST_Posts_Controller::sanitize_post_statuses().
Parameters Parameters
- $statuses
-
(string|array) (Required) One or more post statuses.
- $request
-
(WP_REST_Request) (Required) Full details about the request.
- $parameter
-
(string) (Required) Additional parameter to pass to validation.
Return Return
(array|WP_Error) A list of valid statuses, otherwise WP_Error object.
Source Source
File: libraries/lifterlms-rest/includes/abstracts/class-llms-rest-posts-controller.php
public function sanitize_post_statuses( $statuses, $request, $parameter ) {
$statuses = wp_parse_slug_list( $statuses );
$attributes = $request->get_attributes();
$default_status = $attributes['args']['status']['default'];
foreach ( $statuses as $status ) {
if ( $status === $default_status ) {
continue;
}
$post_type_obj = get_post_type_object( $this->post_type );
if ( current_user_can( $post_type_obj->cap->edit_posts ) || 'private' === $status && current_user_can( $post_type_obj->cap->read_private_posts ) ) {
$result = rest_validate_request_arg( $status, $request, $parameter );
if ( is_wp_error( $result ) ) {
return $result;
}
} else {
return llms_rest_authorization_required_error( __( 'Status is forbidden.', 'lifterlms' ) );
}
}
return $statuses;
}
Expand full source code Collapse full source code View on GitHub
Changelog Changelog
| Version | Description |
|---|---|
| 1.0.0-beta.19 | Introduced. |