Changeset 50718 for branches/5.7/tests/phpunit/tests/rest-api/rest-posts-controller.php

Timestamp:

04/14/2021 11:25:28 PM (4 years ago)

Author:

desrosj

Message:

REST API: Allow authors to read their own password protected posts.

Allow authenticated users to read the contents of password protected posts if they have the edit_post meta capability for the post.

Merges [50717] to the 5.7 branch.
Props xknown, zieladam, peterwilsoncc, swissspidy, timothyblynjacobs.

Location:

branches/5.7

Files:

• . (modified) (1 prop)
• tests/phpunit/tests/rest-api/rest-posts-controller.php (modified) (1 diff)

branches/5.7/tests/phpunit/tests/rest-api/rest-posts-controller.php

@@ -1819 +1819 @@
 
         $this->assertErrorResponse( 'rest_forbidden', $response, 401 );
+    }
+
+    public function test_get_post_draft_edit_context() {
+        $post_content = 'Hello World!';
+        $this->factory->post->create(
+            array(
+                'post_title'    => 'Hola',
+                'post_password' => 'password',
+                'post_content'  => $post_content,
+                'post_excerpt'  => $post_content,
+                'post_author'   => self::$editor_id,
+            )
+        );
+        $draft_id = $this->factory->post->create(
+            array(
+                'post_status'  => 'draft',
+                'post_author'  => self::$contributor_id,
+                'post_content' => '<!-- wp:latest-posts {"displayPostContent":true} /--> <!-- wp:latest-posts {"displayPostContent":true,"displayPostContentRadio":"full_post"} /-->',
+            )
+        );
+        wp_set_current_user( self::$contributor_id );
+        $request = new WP_REST_Request( 'GET', sprintf( '/wp/v2/posts/%d', $draft_id ) );
+        $request->set_param( 'context', 'edit' );
+        $response = rest_get_server()->dispatch( $request );
+        $data     = $response->get_data();
+        $this->assertNotContains( $post_content, $data['content']['rendered'] );
     }