Changeset 59122 for trunk/src/wp-includes/capabilities.php

Timestamp:

09/30/2024 06:47:20 AM (23 months ago)

Author:

cbravobernal

Message:

Block bindings: Add canUpdateBlockBindings editor setting.

Adds a canUpdateBlockBindings editor setting that allows to decide if the user is able to create and modify bindings through the UI. By default, only admin users can do it, but it can be overridden with block_editor_settings_all filter.

Props santosguillamot, gziolo, jorbin, noisysocks, matveb, cbravobernal, youknowriad, mamaduka, timothyblynjacobs, peterwilsoncc, drivingralle.
Fixes #61945.

File:

• trunk/src/wp-includes/capabilities.php (modified) (1 diff)

trunk/src/wp-includes/capabilities.php

@@ -802 +802 @@
                         $caps = map_meta_cap( 'edit_user', $user_id, $args[0] );
                         break;
+                case 'edit_block_binding':
+                        $block_editor_context = $args[0];
+                        if ( isset( $block_editor_context->post ) ) {
+                                $object_id = $block_editor_context->post->ID;
+                        }
+                        /*
+                         * If the post ID is null, check if the context is the site editor.
+                         * Fall back to the edit_theme_options in that case.
+                         */
+                        if ( ! isset( $object_id ) ) {
+                                if ( ! isset( $block_editor_context->name ) || 'core/edit-site' !== $block_editor_context->name ) {
+                                        $caps[] = 'do_not_allow';
+                                        break;
+                                }
+                                $caps = map_meta_cap( 'edit_theme_options', $user_id );
+                                break;
+                        }
+
+                        $object_subtype = get_object_subtype( 'post', (int) $object_id );
+                        if ( empty( $object_subtype ) ) {
+                                $caps[] = 'do_not_allow';
+                                break;
+                        }
+
+                        $caps = map_meta_cap( "edit_{$object_subtype}", $user_id, $object_id );
+                        break;
                 default:
                         // Handle meta capabilities for custom post types.