BP_REST_Media_Albums_Endpoint::update_item_permissions_check( WP_REST_Request $request )

Checks if a given request has access to for the user.

Description

Parameters

$request: (Required) Full details about the request.

Return

(bool)

Source

File: bp-media/classes/class-bp-rest-media-albums-endpoint.php

public function update_item_permissions_check( $request ) {
    $retval = true;
 
    if ( ! is_user_logged_in() ) {
        $retval = new WP_Error(
            'bp_rest_authorization_required',
            __( 'Sorry, you need to be logged in to update this album.', 'buddyboss' ),
            array(
                'status' => rest_authorization_required_code(),
            )
        );
    }
 
    $album = new BP_Media_Album( $request['id'] );
 
    if ( empty( $album->id ) ) {
        $retval = new WP_Error(
            'bp_rest_album_invalid_id',
            __( 'Invalid Album ID.', 'buddyboss' ),
            array(
                'status' => 404,
            )
        );
    }
 
    if ( true === $retval && ! bp_album_user_can_delete( $album ) ) {
        $retval = new WP_Error(
            'bp_rest_authorization_required',
            __( 'Sorry, you are not allowed to update this album.', 'buddyboss' ),
            array(
                'status' => rest_authorization_required_code(),
            )
        );
    }
 
    /**
     * Filter the album `update_item` permissions check.
     *
     * @param bool            $retval  Returned value.
     * @param WP_REST_Request $request The request sent to the API.
     *
     * @since 0.1.0
     */
    return apply_filters( 'bp_rest_media_album_update_item_permissions_check', $retval, $request );
}

Expand full source code Collapse full source code

Changelog

Changelog
Version	Description
0.1.0	Introduced.

Uses

Uses
Uses	Description
bp-media/bp-media-template.php: bp_album_user_can_delete()	Determine if the current user can delete an album item.
bp-media/classes/class-bp-rest-media-albums-endpoint.php: bp_rest_media_album_update_item_permissions_check	Filter the album `update_item` permissions check.
bp-media/classes/class-bp-media-album.php: BP_Media_Album::__construct()	Constructor method.
bp-groups/bp-groups-functions.php: groups_can_user_manage_albums()	Check whether a user is allowed to manage albums in a given group.
bp-core/bp-core-template.php: bp_is_active()	Check whether a given component (or feature of a component) is active.
bp-core/bp-core-template.php: bp_loggedin_user_id()	Get the ID of the currently logged-in user.

Show 1 more use Hide more uses

Questions?

We're always happy to help with code or other questions you might have! Search our developer docs, contact support, or connect with our sales team.

Contents