Ticket #43809: 43809.5.diff

src/wp-includes/default-filters.php

@@ -351 +351 @@
 add_action( 'user_request_action_confirmed', '_wp_privacy_account_request_confirmed' );
 add_filter( 'user_request_action_confirmed_message', '_wp_privacy_account_request_confirmed_message', 10, 2 );
 add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_comment_personal_data_exporter' );
+add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_post_personal_data_exporter' );
 add_filter( 'wp_privacy_personal_data_erasers', 'wp_register_comment_personal_data_eraser' );
 
 // Cron tasks

src/wp-includes/post.php

@@ -6676 +6676 @@
 
         return $clauses;
 }
+
+/**
+ * Registers the personal data exporter for posts.
+ *
+ * @since 4.9.6
+ *
+ * @param array   $exporters   An array of personal data exporters.
+ * @return array  An array of personal data exporters.
+ */
+function wp_register_post_personal_data_exporter( $exporters ) {
+        $exporters[] = array(
+                'exporter_friendly_name' => __( 'WordPress Posts' ),
+                'callback'               => 'wp_posts_personal_data_exporter',
+        );
+
+        return $exporters;
+}
+
+/**
+ * Finds and exports personal data associated with an email address from the posts table.
+ *
+ * @since 4.9.6
+ *
+ * @param string  $email_address The post author email address.
+ * @param int     $page          Post page.
+ * @return array An array of personal data.
+ */
+function wp_posts_personal_data_exporter( $email_address, $page = 1 ) {
+        $email_address = trim( $email_address );
+
+        $number = 500;
+        $page   = (int) $page;
+
+        $data_to_export = array();
+
+        $user = get_user_by( 'email' , $email_address );
+
+        if ( false === $user ) {
+                return array(
+                        'data' => $data_to_export,
+                        'done' => true,
+                );
+        }
+
+        $post_stati = array_diff(
+                get_post_stati(),
+                array(
+                        'inherit',
+                        'auto-draft',
+                )
+        );
+
+        $post_query = new WP_Query(
+                array(
+                        'author'         => $user->ID,
+                        'posts_per_page' => $number,
+                        'paged'          => $page,
+                        'post_type'      => array(
+                                'post',
+                                'page',
+                        ),
+                        'post_status'    => $post_stati,
+                        'orderby'        => 'ID',
+                        'order'          => 'ASC',
+                )
+        );
+
+        $user_prop_to_export = array(
+                'post_title' => __( 'Post Title' ),
+                'guid'       => __( 'Post URL' ),
+                'ID'         => __( 'Post ID' ),
+        );
+
+        foreach ( (array) $post_query->posts as $post ) {
+                $post_data_to_export = array();
+
+                foreach ( $user_prop_to_export as $key => $name ) {
+                        // Skip guid for private posts and ID for public posts.
+                        if ( 'private' === $post->post_status || ! empty( $post->post_password ) ) {
+                                if ( 'guid' === $key ) {
+                                        continue;
+                                }
+                        } else {
+                                if ( 'ID' === $key ) {
+                                        continue;
+                                }
+                        }
+
+                        $value = $post->$key;
+
+                        if ( 'post_title' === $key ) {
+                                if ( 'private' === $post->post_status ) {
+                                        $value = sprintf( __( 'Private: %s' ), $value );
+                                } elseif ( ! empty( $post->post_password ) ) {
+                                        $value = sprintf( __( 'Password Protected: %s' ), $value );
+                                }
+                        }
+
+                        if ( ! empty( $value ) ) {
+                                $post_data_to_export[] = array(
+                                        'name'  => $name,
+                                        'value' => $value,
+                                );
+                        }
+                }
+
+                $data_to_export[] = array(
+                        'group_id'    => 'posts',
+                        'group_label' => __( 'Posts / Pages' ),
+                        'item_id'     => "post-{$post->ID}",
+                        'data'        => $post_data_to_export,
+                );
+        }
+
+        $done = $post_query->max_num_pages <= $page;
+
+        return array(
+                'data' => $data_to_export,
+                'done' => $done,
+        );
+}

tests/phpunit/tests/post.php

@@ -1354 +1354 @@
                 $this->assertEquals( $changeset_data, json_decode( get_post( $post_id )->post_content, true ) );
         }
 
+        /**
+         * Testing the `wp_posts_personal_data_exporter()` function.
+         *
+         * @ticket 43440
+         * @group privacy
+         */
+        public function test_wp_posts_personal_data_exporter() {
+                $args = array(
+                        'post_title'  => 'My Post',
+                        'author'      => self::$editor_id,
+                        'post_type'   => 'post',
+                        'post_status' => 'publish',
+                );
+
+                $test_post   = self::factory()->post->create_and_get( $args );
+                $test_author = new WP_User( self::$editor_id );
+
+                $actual = wp_posts_personal_data_exporter( $test_author->data->user_email );
+
+                $this->assertTrue( $actual['done'] );
+
+                // Number of exported posts.
+                $this->assertSame( 1, count( $actual['data'] ) );
+
+                // Number of exported post properties.
+                $this->assertSame( 2, count( $actual['data'][0]['data'] ) );
+
+                // Exported group.
+                $this->assertSame( 'posts', $actual['data'][0]['group_id'] );
+                $this->assertSame( 'Posts / Pages', $actual['data'][0]['group_label'] );
+
+                // Exported post properties.
+                $this->assertSame( $test_post->post_title, $actual['data'][0]['data'][0]['value'] );
+                $this->assertSame( $test_post->guid, $actual['data'][0]['data'][1]['value'] );
+
+                wp_delete_post( $test_post->ID, true );
+        }
+
+        /**
+         * Testing the `wp_posts_personal_data_exporter()` function when a user has
+         * a private post.
+         *
+         * @ticket 43440
+         * @group privacy
+         */
+        public function test_wp_posts_personal_data_exporter_private_post() {
+                $args = array(
+                        'post_title'  => 'My Post',
+                        'author'      => self::$editor_id,
+                        'post_type'   => 'post',
+                        'post_status' => 'private',
+                );
+
+                $test_post   = self::factory()->post->create_and_get( $args );
+                $test_author = new WP_User( self::$editor_id );
+
+                $actual = wp_posts_personal_data_exporter( $test_author->data->user_email );
+
+                $this->assertTrue( $actual['done'] );
+
+                // Number of exported post properties.
+                $this->assertSame( 2, count( $actual['data'][0]['data'] ) );
+
+                // Exported post properties.
+                $this->assertSame( 'Private: ' . $test_post->post_title, $actual['data'][0]['data'][0]['value'] );
+                $this->assertSame( $test_post->ID, $actual['data'][0]['data'][1]['value'] );
+
+                wp_delete_post( $test_post->ID, true );
+        }
+
+        /**
+         * Testing the `wp_posts_personal_data_exporter()` function when a user has
+         * a private post.
+         *
+         * @ticket 43440
+         * @group privacy
+         */
+        public function test_wp_posts_personal_data_exporter_password_protected_post() {
+                $args = array(
+                        'post_title'    => 'My Post',
+                        'author'        => self::$editor_id,
+                        'post_type'     => 'post',
+                        'post_status'   => 'publish',
+                        'post_password' => 'password',
+                );
+
+                $test_post   = self::factory()->post->create_and_get( $args );
+                $test_author = new WP_User( self::$editor_id );
+
+                $actual = wp_posts_personal_data_exporter( $test_author->data->user_email );
+
+                $this->assertTrue( $actual['done'] );
+
+                // Number of exported post properties.
+                $this->assertSame( 2, count( $actual['data'][0]['data'] ) );
+
+                // Exported post properties.
+                $this->assertSame( 'Password Protected: ' . $test_post->post_title, $actual['data'][0]['data'][0]['value'] );
+                $this->assertSame( $test_post->ID, $actual['data'][0]['data'][1]['value'] );
+
+                wp_delete_post( $test_post->ID, true );
+        }
+
+        /**
+         * Testing the `wp_posts_personal_data_exporter()` function for no posts found.
+         *
+         * @ticket 43440
+         * @group privacy
+         */
+        public function test_wp_posts_personal_data_exporter_no_posts_found() {
+                $actual = wp_posts_personal_data_exporter( 'nopostsfound@local.host' );
+
+                $expected = array(
+                        'data' => array(),
+                        'done' => true,
+                );
+
+                $this->assertSame( $expected, $actual );
+        }
+
+        /**
+         * Testing the `wp_posts_personal_data_exporter()` function with an empty second page.
+         *
+         * @ticket 43440
+         * @group privacy
+         */
+        public function test_wp_posts_personal_data_exporter_second_page() {
+                $args = array(
+                        'post_title'  => 'Some Post',
+                        'author'      => self::$editor_id,
+                        'post_type'   => 'post',
+                        'post_status' => 'publish',
+                );
+
+                $test_post   = self::factory()->post->create_and_get( $args );
+                $test_author = new WP_User( self::$editor_id );
+
+                $actual = wp_posts_personal_data_exporter( $test_author->data->user_email, 2 );
+
+                $this->assertTrue( $actual['done'] );
+
+                // Number of exported comments.
+                $this->assertSame( 0, count( $actual['data'] ) );
+        }
 }