WP_REST_Posts_Controller::create_item_permissions_check() │ public │ WP 4.7.0

Checks if a given request has access to create a post.

Method of the class: WP_REST_Posts_Controller{}

No Hooks.

Return

true|WP_Error. True if the request has access to create items, WP_Error object otherwise.

Usage

$WP_REST_Posts_Controller = new WP_REST_Posts_Controller();
$WP_REST_Posts_Controller->create_item_permissions_check( $request );

$request(WP_REST_Request) (required)

Full details about the request.

Changelog

WP_REST_Posts_Controller::create_item_permissions_check() WP REST Posts Controller::create item permissions check code ^{WP 6.1.1}

public function create_item_permissions_check( $request ) {
	if ( ! empty( $request['id'] ) ) {
		return new WP_Error(
			'rest_post_exists',
			__( 'Cannot create existing post.' ),
			array( 'status' => 400 )
		);
	}

	$post_type = get_post_type_object( $this->post_type );

	if ( ! empty( $request['author'] ) && get_current_user_id() !== $request['author'] && ! current_user_can( $post_type->cap->edit_others_posts ) ) {
		return new WP_Error(
			'rest_cannot_edit_others',
			__( 'Sorry, you are not allowed to create posts as this user.' ),
			array( 'status' => rest_authorization_required_code() )
		);
	}

	if ( ! empty( $request['sticky'] ) && ! current_user_can( $post_type->cap->edit_others_posts ) && ! current_user_can( $post_type->cap->publish_posts ) ) {
		return new WP_Error(
			'rest_cannot_assign_sticky',
			__( 'Sorry, you are not allowed to make posts sticky.' ),
			array( 'status' => rest_authorization_required_code() )
		);
	}

	if ( ! current_user_can( $post_type->cap->create_posts ) ) {
		return new WP_Error(
			'rest_cannot_create',
			__( 'Sorry, you are not allowed to create posts as this user.' ),
			array( 'status' => rest_authorization_required_code() )
		);
	}

	if ( ! $this->check_assign_terms_permission( $request ) ) {
		return new WP_Error(
			'rest_cannot_assign_term',
			__( 'Sorry, you are not allowed to assign the provided terms.' ),
			array( 'status' => rest_authorization_required_code() )
		);
	}

	return true;
}