Changeset 52079 for trunk/src/wp-includes/post.php

Timestamp:

11/09/2021 06:58:59 PM (4 years ago)

Author:

TimothyBlynJacobs

Message:

REST API: Introduce Menu management endpoints.

This commit introduces the /wp/v2/menus, /wp/v2/menu-items and /wp/v2/menu-locations REST API endpoints. These endpoints are fully available to users with the edit_theme_options capability, but can be read by any user who can edit a REST API available post type.

The nav_menu taxonomy and nav_menu_item post type now map their capabilities to the edit_theme_options primitive capability. This allows developers to provide more fine-grained access control. However, if a developer is currently dynamically removing the edit_theme_options capability using map_meta_cap, they should use the user_has_cap filter instead.

The wp_update_nav_menu_item() function has been adjusted to return an error if saving the menu item post or assigning the menu item to a menu generate an error.

Lastly, a new menu item type is introduced, block, that can be used to store a Block as a menu item.

Props andraganescu, antonvlasenko, dingo_d, dlh, isabel_brison, kadamwhite, Mamaduka, NateWr, noisysocks, peterwilsoncc, ryelle, schlessera, soean, Spacedmonkey, talldanwp, TimothyBlynJacobs, tobifjellner, westonruter, wpscholar, zieladam.
Fixes #40878.

File:

• trunk/src/wp-includes/post.php (modified) (1 diff)

trunk/src/wp-includes/post.php

@@ -127 +127 @@
         'nav_menu_item',
         array(
-            'labels'           => array(
+            'labels'                => array(
                 'name'          => __( 'Navigation Menu Items' ),
                 'singular_name' => __( 'Navigation Menu Item' ),
             ),
-            'public'           => false,
-            '_builtin'         => true, /* internal use only. don't use this when registering your own post type. */
-            'hierarchical'     => false,
-            'rewrite'          => false,
-            'delete_with_user' => false,
-            'query_var'        => false,
+            'public'                => false,
+            '_builtin'              => true, /* internal use only. don't use this when registering your own post type. */
+            'hierarchical'          => false,
+            'rewrite'               => false,
+            'delete_with_user'      => false,
+            'query_var'             => false,
+            'map_meta_cap'          => true,
+            'capability_type'       => array( 'edit_theme_options', 'edit_theme_options' ),
+            'capabilities'          => array(
+                // Meta Capabilities.
+                'edit_post'              => 'edit_post',
+                'read_post'              => 'read_post',
+                'delete_post'            => 'delete_post',
+                // Primitive Capabilities.
+                'edit_posts'             => 'edit_theme_options',
+                'edit_others_posts'      => 'edit_theme_options',
+                'delete_posts'           => 'edit_theme_options',
+                'publish_posts'          => 'edit_theme_options',
+                'read_private_posts'     => 'edit_theme_options',
+                'read'                   => 'read',
+                'delete_private_posts'   => 'edit_theme_options',
+                'delete_published_posts' => 'edit_theme_options',
+                'delete_others_posts'    => 'edit_theme_options',
+                'edit_private_posts'     => 'edit_theme_options',
+                'edit_published_posts'   => 'edit_theme_options',
+            ),
+            'show_in_rest'          => true,
+            'rest_base'             => 'menu-items',
+            'rest_controller_class' => 'WP_REST_Menu_Items_Controller',
         )
     );