Changeset 50717 for trunk/tests/phpunit/tests/rest-api/rest-posts-controller.php

Timestamp:

04/14/2021 11:22:07 PM (5 years ago)

Author:

desrosj

Message:

REST API: Allow authors to read their own password protected posts.

Allow authenticated users to read the contents of password protected posts if they have the edit_post meta capability for the post.

Props xknown, zieladam, peterwilsoncc, swissspidy, timothyblynjacobs.

File:

• trunk/tests/phpunit/tests/rest-api/rest-posts-controller.php (modified) (1 diff)

trunk/tests/phpunit/tests/rest-api/rest-posts-controller.php

@@ -1819 +1819 @@
 
                 $this->assertErrorResponse( 'rest_forbidden', $response, 401 );
+        }
+
+        public function test_get_post_draft_edit_context() {
+                $post_content = 'Hello World!';
+                $this->factory->post->create(
+                        array(
+                                'post_title'    => 'Hola',
+                                'post_password' => 'password',
+                                'post_content'  => $post_content,
+                                'post_excerpt'  => $post_content,
+                                'post_author'   => self::$editor_id,
+                        )
+                );
+                $draft_id = $this->factory->post->create(
+                        array(
+                                'post_status'  => 'draft',
+                                'post_author'  => self::$contributor_id,
+                                'post_content' => '<!-- wp:latest-posts {"displayPostContent":true} /--> <!-- wp:latest-posts {"displayPostContent":true,"displayPostContentRadio":"full_post"} /-->',
+                        )
+                );
+                wp_set_current_user( self::$contributor_id );
+                $request = new WP_REST_Request( 'GET', sprintf( '/wp/v2/posts/%d', $draft_id ) );
+                $request->set_param( 'context', 'edit' );
+                $response = rest_get_server()->dispatch( $request );
+                $data     = $response->get_data();
+                $this->assertNotContains( $post_content, $data['content']['rendered'] );
         }