[wp-trac] [WordPress Trac] #21386: XML-RPC needs a user permission method

WordPress Trac noreply at wordpress.org
Fri Sep 12 06:55:29 UTC 2014


#21386: XML-RPC needs a user permission method
--------------------------+-----------------------------
 Reporter:  markoheijnen  |       Owner:
     Type:  enhancement   |      Status:  new
 Priority:  normal        |   Milestone:  Future Release
Component:  XML-RPC       |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  mobile        |     Focuses:
--------------------------+-----------------------------

Comment (by markoheijnen):

 Replying to [comment:17 rmccue]:
 > Replying to [comment:16 markoheijnen]:
 > > I believe that getPostTypes is the right method since someone could
 retrieve all the post types to build up a menu (always wishful thinking
 for our mobile apps). I will create a ticket for the REST API to look into
 this too. They return get_post_types() which also generates the same
 problems.
 >
 > FWIW, you can get all the permissions you (as a logged in user) have via
 a request to your user information (`GET /users/me`) which simply returns
 `$user->allcaps`.

 And then "no filters are run, nor would map_meta_cap() get a chance to do
 its magic." right?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/21386#comment:18>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list