Changeset 39438 for trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php

Timestamp:

12/02/2016 10:10:01 PM (8 years ago)

Author:

jeremyfelt

Message:

REST API: Disable DELETE requests for users in multisite.

In wp-admin, users are removed from individual sites rather than deleted. A user can only be deleted from the network admin.

Until support for a PUT request that removes a user's site and content associations is available, DELETE requests are disabled to avoid possible issues with lost content.

Props jnylen0, rachelbaker.
Fixes #38962.

File:

• trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php (modified) (1 diff)

trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php

@@ -702 +702 @@
      */
     public function delete_item( $request ) {
+        // We don't support delete requests in multisite.
+        if ( is_multisite() ) {
+            return new WP_Error( 'rest_cannot_delete', __( 'The user cannot be deleted.' ), array( 'status' => 501 ) );
+        }
+
         $id       = (int) $request['id'];
         $reassign = false === $request['reassign'] ? null : absint( $request['reassign'] );