Changeset 38810 for trunk/src/wp-admin/customize.php

Timestamp:

10/18/2016 08:04:36 PM (8 years ago)

Author:

westonruter

Message:

Customize: Implement customized state persistence with changesets.

Includes infrastructure developed in the Customize Snapshots feature plugin.

See ​https://make.wordpress.org/core/2016/10/12/customize-changesets-technical-design-decisions/

Props westonruter, valendesigns, utkarshpatel, stubgo, lgedeon, ocean90, ryankienstra, mihai2u, dlh, aaroncampbell, jonathanbardo, jorbin.
See #28721.
See #31089.
Fixes #30937.
Fixes #31517.
Fixes #30028.
Fixes #23225.
Fixes #34142.
Fixes #36485.

File:

• trunk/src/wp-admin/customize.php (modified) (3 diffs)

trunk/src/wp-admin/customize.php

@@ -21 +21 @@
 }
 
+/**
+ * @global WP_Scripts           $wp_scripts
+ * @global WP_Customize_Manager $wp_customize
+ */
+global $wp_scripts, $wp_customize;
+
+if ( $wp_customize->changeset_post_id() ) {
+    if ( ! current_user_can( get_post_type_object( 'customize_changeset' )->cap->edit_post, $wp_customize->changeset_post_id() ) ) {
+        wp_die(
+            '<h1>' . __( 'Cheatin&#8217; uh?' ) . '</h1>' .
+            '<p>' . __( 'Sorry, you are not allowed to edit this changeset.' ) . '</p>',
+            403
+        );
+    }
+    if ( in_array( get_post_status( $wp_customize->changeset_post_id() ), array( 'publish', 'trash' ), true ) ) {
+        wp_die(
+            '<h1>' . __( 'Cheatin&#8217; uh?' ) . '</h1>' .
+            '<p>' . __( 'This changeset has already been published and cannot be further modified.' ) . '</p>' .
+            '<p><a href="' . esc_url( remove_query_arg( 'changeset_uuid' ) ) . '">' . __( 'Customize New Changes' ) . '</a></p>',
+            403
+        );
+    }
+}
+
+
 wp_reset_vars( array( 'url', 'return', 'autofocus' ) );
 if ( ! empty( $url ) ) {
@@ -31 +56 @@
     $wp_customize->set_autofocus( wp_unslash( $autofocus ) );
 }
-
-/**
- * @global WP_Scripts           $wp_scripts
- * @global WP_Customize_Manager $wp_customize
- */
-global $wp_scripts, $wp_customize;
 
 $registered = $wp_scripts->registered;
@@ -116 +135 @@
             <?php
             $save_text = $wp_customize->is_theme_active() ? __( 'Save &amp; Publish' ) : __( 'Save &amp; Activate' );
-            submit_button( $save_text, 'primary save', 'save', false );
+            $save_attrs = array();
+            if ( ! current_user_can( get_post_type_object( 'customize_changeset' )->cap->publish_posts ) ) {
+                $save_attrs['style'] = 'display: none';
+            }
+            submit_button( $save_text, 'primary save', 'save', false, $save_attrs );
             ?>
             <span class="spinner"></span>