Automattic /
jetpack
| @@ 1024-1043 (lines=20) @@ | ||
| 1021 | } |
|
| 1022 | } |
|
| 1023 | ||
| 1024 | if ( |
|
| 1025 | -1 == get_option( 'blog_public' ) && |
|
| 1026 | /** |
|
| 1027 | * Filter access to a specific post. |
|
| 1028 | * |
|
| 1029 | * @module json-api |
|
| 1030 | * |
|
| 1031 | * @since 3.4.0 |
|
| 1032 | * |
|
| 1033 | * @param bool current_user_can( 'read_post', $post->ID ) Can the current user access the post. |
|
| 1034 | * @param WP_Post $post Post data. |
|
| 1035 | */ |
|
| 1036 | ! apply_filters( |
|
| 1037 | 'wpcom_json_api_user_can_view_post', |
|
| 1038 | current_user_can( 'read_post', $post->ID ), |
|
| 1039 | $post |
|
| 1040 | ) |
|
| 1041 | ) { |
|
| 1042 | return new WP_Error( 'unauthorized', 'User cannot view post', array( 'status_code' => 403, 'error' => 'private_blog' ) ); |
|
| 1043 | } |
|
| 1044 | ||
| 1045 | if ( strlen( $post->post_password ) && !current_user_can( 'edit_post', $post->ID ) ) { |
|
| 1046 | return new WP_Error( 'unauthorized', 'User cannot view password protected post', array( 'status_code' => 403, 'error' => 'password_protected' ) ); |
|
| @@ 250-269 (lines=20) @@ | ||
| 247 | return new WP_Error( 'unauthorized', 'User cannot view post', 403 ); |
|
| 248 | } |
|
| 249 | ||
| 250 | if ( |
|
| 251 | -1 == get_option( 'blog_public' ) && |
|
| 252 | /** |
|
| 253 | * Filter access to a specific post. |
|
| 254 | * |
|
| 255 | * @module json-api |
|
| 256 | * |
|
| 257 | * @since 3.4.0 |
|
| 258 | * |
|
| 259 | * @param bool current_user_can( 'read_post', $post->ID ) Can the current user access the post. |
|
| 260 | * @param WP_Post $post Post data. |
|
| 261 | */ |
|
| 262 | ! apply_filters( |
|
| 263 | 'wpcom_json_api_user_can_view_post', |
|
| 264 | current_user_can( 'read_post', $post->ID ), |
|
| 265 | $post |
|
| 266 | ) |
|
| 267 | ) { |
|
| 268 | return new WP_Error( 'unauthorized', 'User cannot view post', array( 'status_code' => 403, 'error' => 'private_blog' ) ); |
|
| 269 | } |
|
| 270 | ||
| 271 | if ( strlen( $post->post_password ) && !current_user_can( 'edit_post', $post->ID ) ) { |
|
| 272 | return new WP_Error( 'unauthorized', 'User cannot view password protected post', array( 'status_code' => 403, 'error' => 'password_protected' ) ); |
|
