BP_REST_Attachments_Member_Avatar_Endpoint::create_item_permissions_check( WP_REST_Request $request )

Checks if a given request has access to upload a member avatar.

Description

Parameters

$request: (Required) Full details about the request.

Return

(bool|WP_Error)

Source

File: bp-members/classes/class-bp-rest-attachments-member-avatar-endpoint.php

public function create_item_permissions_check( $request ) {
    $retval = $this->get_item_permissions_check( $request );
    $args   = array();
 
    if ( isset( $this->user->ID ) ) {
        $args = array(
            'item_id' => (int) $this->user->ID,
            'object'  => 'user',
        );
    }
 
    if ( true === $retval && ! is_user_logged_in() ) {
        $retval = new WP_Error(
            'bp_rest_authorization_required',
            __( 'Sorry, you need to be logged in to perform this action.', 'buddyboss' ),
            array(
                'status' => rest_authorization_required_code(),
            )
        );
    }
 
    if ( true === $retval && 'POST' === $request->get_method() && bp_disable_avatar_uploads() ) {
        $retval = new WP_Error(
            'bp_rest_attachments_member_avatar_disabled',
            __( 'Sorry, member avatar upload is disabled.', 'buddyboss' ),
            array(
                'status' => 500,
            )
        );
    }
 
    if ( true === $retval && ! empty( $args ) && ! bp_attachments_current_user_can( 'edit_avatar', $args ) ) {
        $retval = new WP_Error(
            'bp_rest_authorization_required',
            __( 'Sorry, you are not authorized to perform this action.', 'buddyboss' ),
            array(
                'status' => rest_authorization_required_code(),
            )
        );
    }
 
    /**
     * Filter the member avatar `create_item` permissions check.
     *
     * @param bool|WP_Error $retval Returned value.
     * @param WP_REST_Request $request The request sent to the API.
     *
     * @since 0.1.0
     */
    return apply_filters( 'bp_rest_attachments_member_avatar_create_item_permissions_check', $retval, $request );
}

Expand full source code Collapse full source code

Changelog

Changelog
Version	Description
0.1.0	Introduced.

Uses

Uses
Uses	Description
bp-members/classes/class-bp-rest-attachments-member-avatar-endpoint.php: BP_REST_Attachments_Member_Avatar_Endpoint::get_item_permissions_check()	Checks if a given request has access to get a member avatar.
bp-members/classes/class-bp-rest-attachments-member-avatar-endpoint.php: bp_rest_attachments_member_avatar_create_item_permissions_check	Filter the member avatar `create_item` permissions check.
bp-core/bp-core-attachments.php: bp_attachments_current_user_can()	Check the current user’s capability to edit an avatar for a given object.
bp-core/bp-core-options.php: bp_disable_avatar_uploads()	Are members able to upload their own avatars?

Used By
Used By	Description
bp-members/classes/class-bp-rest-attachments-member-avatar-endpoint.php: BP_REST_Attachments_Member_Avatar_Endpoint::delete_item_permissions_check()	Checks if a given request has access to delete member avatar.

Questions?

We're always happy to help with code or other questions you might have! Search our developer docs, contact support, or connect with our sales team.

Contents