Changeset 44777 for trunk/src/wp-admin/includes/ajax-actions.php

Timestamp:

02/28/2019 11:48:46 AM (7 years ago)

Author:

SergeyBiryukov

Message:

Privacy: Return a more accurate error message when the user cannot perform the requested action.

Props mmuhsin, jplojohn, garrett-eclipse, desrosj.
Fixes #44833.

File:

• trunk/src/wp-admin/includes/ajax-actions.php (modified) (2 diffs)

trunk/src/wp-admin/includes/ajax-actions.php

@@ -4453 +4453 @@
 
         if ( ! current_user_can( 'export_others_personal_data' ) ) {
-                wp_send_json_error( __( 'Invalid request.' ) );
+                wp_send_json_error( __( 'Sorry, you are not allowed to perform this action.' ) );
         }
 
@@ -4635 +4635 @@
         // Both capabilities are required to avoid confusion, see `_wp_personal_data_removal_page()`.
         if ( ! current_user_can( 'erase_others_personal_data' ) || ! current_user_can( 'delete_users' ) ) {
-                wp_send_json_error( __( 'Invalid request.' ) );
+                wp_send_json_error( __( 'Sorry, you are not allowed to perform this action.' ) );
         }