Changeset 49302 for trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php

Timestamp:

10/24/2020 04:02:34 PM (6 years ago)

Author:

TimothyBlynJacobs

Message:

REST API: Don't validate status if it hasn't changed.

In particular, this allows for sending status=inherit to an attachment if it's current status is inherit. This status would be rejected because it is an "internal" post status which isn't exposed.

As a general rule, a developer should always be able to PUT back a GET response without error.

Props dfenton, pputzer, TimothyBlynJacobs.
Fixes #40399.

File:

• trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php (modified) (5 diffs)

trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php

@@ -1053 +1053 @@
          */
         protected function prepare_item_for_database( $request ) {
-                $prepared_post = new stdClass();
+                $prepared_post  = new stdClass();
+                $current_status = '';
 
                 // Post ID.
@@ -1063 +1064 @@
 
                         $prepared_post->ID = $existing_post->ID;
+                        $current_status    = $existing_post->post_status;
                 }
 
@@ -1106 +1108 @@
 
                 // Post status.
-                if ( ! empty( $schema['properties']['status'] ) && isset( $request['status'] ) ) {
+                if (
+                        ! empty( $schema['properties']['status'] ) &&
+                        isset( $request['status'] ) &&
+                        ( ! $current_status || $current_status !== $request['status'] )
+                ) {
                         $status = $this->handle_status_param( $request['status'], $post_type );
 
@@ -1254 +1260 @@
                 return apply_filters( "rest_pre_insert_{$this->post_type}", $prepared_post, $request );
 
+        }
+
+        /**
+         * Checks whether the status is valid for the given post.
+         *
+         * Allows for sending an update request with the current status, even if that status would not be acceptable.
+         *
+         * @since 5.6.0
+         *
+         * @param string          $status  The provided status.
+         * @param WP_REST_Request $request The request object.
+         * @param string          $param   The parameter name.
+         * @return true|WP_Error True if the status is valid, or WP_Error if not.
+         */
+        public function check_status( $status, $request, $param ) {
+                if ( $request['id'] ) {
+                        $post = $this->get_post( $request['id'] );
+
+                        if ( ! is_wp_error( $post ) && $post->post_status === $status ) {
+                                return true;
+                        }
+                }
+
+                $args = $request->get_attributes()['args'][ $param ];
+
+                return rest_validate_value_from_schema( $status, $args, $param );
         }
 
@@ -2116 +2148 @@
                                         'enum'        => array_keys( get_post_stati( array( 'internal' => false ) ) ),
                                         'context'     => array( 'view', 'edit' ),
+                                        'arg_options' => array(
+                                                'validate_callback' => array( $this, 'check_status' ),
+                                        ),
                                 ),
                                 'type'         => array(