Ticket #39000: 39000.diff

src/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php

@@ -92 +92 @@
                                         'reassign' => array(
                                                 'type'        => 'integer',
                                                 'description' => __( 'Reassign the deleted user\'s posts and links to this user ID.' ),
+                                                'required'    => true,
+                                                'sanitize_callback' => array( $this, 'check_reassign' ),
                                         ),
                                 ),
                         ),
@@ -125 +127 @@
                                         'reassign' => array(
                                                 'type'        => 'integer',
                                                 'description' => __( 'Reassign the deleted user\'s posts and links to this user ID.' ),
+                                                'required'    => true,
+                                                'sanitize_callback' => array( $this, 'check_reassign' ),
                                         ),
                                 ),
                         ),
@@ -133 +137 @@
         }
 
         /**
+         * Checks for a valid value for the reassign parameter when deleting users.
+         *
+         * @since 4.7.0
+         *
+         * @param $value
+         * @param $request
+         * @param $param
+         *
+         * @return int|WP_Error
+         */
+        public function check_reassign( $value, $request, $param ) {
+                if ( null === $value || is_numeric( $value ) ) {
+                        return $value;
+                }
+
+                return new WP_Error( 'rest_invalid_param', __( 'Invalid parent type.' ), array( 'status' => 444 ) );
+        }
+
+        /**
          * Permissions check for getting all users.
          *
          * @since 4.7.0

tests/phpunit/tests/rest-api/rest-users-controller.php

@@ -1639 +1639 @@
 
                 $userdata = get_userdata( $user_id ); // cache for later
                 $request = new WP_REST_Request( 'DELETE', sprintf( '/wp/v2/users/%d', $user_id ) );
-                $request['force'] = true;
+                $request->set_param( 'force', true );
+                $request->set_param( 'reassign', null );
                 $response = $this->server->dispatch( $request );
 
                 $this->assertEquals( 200, $response->get_status() );