BP_REST_Group_Membership_Endpoint::delete_item_permissions_check( WP_REST_Request $request )
Check if a given request has access to delete a group member.
Description
Parameters
- $request
-
(Required) Full details about the request.
Return
(WP_Error|bool)
Source
File: bp-groups/classes/class-bp-rest-group-membership-endpoint.php
public function delete_item_permissions_check( $request ) { $retval = true; if ( ! is_user_logged_in() ) { $retval = new WP_Error( 'bp_rest_authorization_required', __( 'Sorry, you need to be logged in to view a group membership.', 'buddyboss' ), array( 'status' => rest_authorization_required_code(), ) ); } $user = bp_rest_get_user( $request['user_id'] ); if ( true === $retval && ! $user instanceof WP_User ) { return new WP_Error( 'bp_rest_group_member_invalid_id', __( 'Invalid group member ID.', 'buddyboss' ), array( 'status' => 404, ) ); } $group = $this->groups_endpoint->get_group_object( $request['group_id'] ); if ( true === $retval && ! $group instanceof BP_Groups_Group ) { $retval = new WP_Error( 'bp_rest_group_invalid_id', __( 'Invalid group ID.', 'buddyboss' ), array( 'status' => 404, ) ); } // Site administrators can do anything. if ( true === $retval && bp_current_user_can( 'bp_moderate' ) ) { $retval = true; } elseif ( true === $retval ) { $loggedin_user_id = bp_loggedin_user_id(); if ( $user->ID !== $loggedin_user_id ) { if ( true === $retval && ! groups_is_user_admin( $loggedin_user_id, $group->id ) && ! groups_is_user_mod( $loggedin_user_id, $group->id ) ) { $retval = new WP_Error( 'bp_rest_authorization_required', __( 'Sorry, you need to be logged in to view a group membership.', 'buddyboss' ), array( 'status' => rest_authorization_required_code(), ) ); } } else { // Special case for self-removal: don't allow if it'd leave a group with no admins. $user = bp_rest_get_user( $request['user_id'] ); $group = $this->groups_endpoint->get_group_object( $request['group_id'] ); $loggedin_user_id = bp_loggedin_user_id(); $group_admins = groups_get_group_admins( $group->id ); if ( true === $retval && 1 === count( $group_admins ) && $loggedin_user_id === $group_admins[0]->user_id && $user->ID === $loggedin_user_id ) { $retval = new WP_Error( 'bp_rest_authorization_required', __( 'Sorry, you need to be logged in to view a group membership.', 'buddyboss' ), array( 'status' => rest_authorization_required_code(), ) ); } } } /** * Filter the group members `delete_item` permissions check. * * @param bool|WP_Error $retval Returned value. * @param WP_REST_Request $request The request sent to the API. * * @since 0.1.0 */ return apply_filters( 'bp_rest_group_members_delete_item_permissions_check', $retval, $request ); }
Changelog
Version | Description |
---|---|
0.1.0 | Introduced. |
Questions?
We're always happy to help with code or other questions you might have! Search our developer docs, contact support, or connect with our sales team.