Automattic /
jetpack
| @@ 274-293 (lines=20) @@ | ||
| 271 | return new WP_Error( 'unauthorized', 'User cannot view post', 403 ); |
|
| 272 | } |
|
| 273 | ||
| 274 | if ( |
|
| 275 | -1 == get_option( 'blog_public' ) && |
|
| 276 | /** |
|
| 277 | * Filter access to a specific post. |
|
| 278 | * |
|
| 279 | * @module json-api |
|
| 280 | * |
|
| 281 | * @since 3.4.0 |
|
| 282 | * |
|
| 283 | * @param bool current_user_can( 'read_post', $post->ID ) Can the current user access the post. |
|
| 284 | * @param WP_Post $post Post data. |
|
| 285 | */ |
|
| 286 | ! apply_filters( |
|
| 287 | 'wpcom_json_api_user_can_view_post', |
|
| 288 | current_user_can( 'read_post', $post->ID ), |
|
| 289 | $post |
|
| 290 | ) |
|
| 291 | ) { |
|
| 292 | return new WP_Error( 'unauthorized', 'User cannot view post', array( 'status_code' => 403, 'error' => 'private_blog' ) ); |
|
| 293 | } |
|
| 294 | ||
| 295 | if ( strlen( $post->post_password ) && !current_user_can( 'edit_post', $post->ID ) ) { |
|
| 296 | return new WP_Error( 'unauthorized', 'User cannot view password protected post', array( 'status_code' => 403, 'error' => 'password_protected' ) ); |
|
| @@ 1068-1087 (lines=20) @@ | ||
| 1065 | } |
|
| 1066 | } |
|
| 1067 | ||
| 1068 | if ( |
|
| 1069 | -1 == get_option( 'blog_public' ) && |
|
| 1070 | /** |
|
| 1071 | * Filter access to a specific post. |
|
| 1072 | * |
|
| 1073 | * @module json-api |
|
| 1074 | * |
|
| 1075 | * @since 3.4.0 |
|
| 1076 | * |
|
| 1077 | * @param bool current_user_can( 'read_post', $post->ID ) Can the current user access the post. |
|
| 1078 | * @param WP_Post $post Post data. |
|
| 1079 | */ |
|
| 1080 | ! apply_filters( |
|
| 1081 | 'wpcom_json_api_user_can_view_post', |
|
| 1082 | current_user_can( 'read_post', $post->ID ), |
|
| 1083 | $post |
|
| 1084 | ) |
|
| 1085 | ) { |
|
| 1086 | return new WP_Error( 'unauthorized', 'User cannot view post', array( 'status_code' => 403, 'error' => 'private_blog' ) ); |
|
| 1087 | } |
|
| 1088 | ||
| 1089 | if ( strlen( $post->post_password ) && !current_user_can( 'edit_post', $post->ID ) ) { |
|
| 1090 | return new WP_Error( 'unauthorized', 'User cannot view password protected post', array( 'status_code' => 403, 'error' => 'password_protected' ) ); |
|
