REST API: Attachment controller calls undefined parent method

[dlh]

WP_REST_Attachments_Controller contains a public validate_user_can_query_private_statuses() method that ends with a call to parent::validate_user_can_query_private_statuses(). However, the parent method was removed in [39104].

It seems possibly unintentional that the method still exists at all in WP_REST_Attachments_Controller; I don't see any uses of it in core.

The attached patch would update the method to pass to the parent sanitize_post_statuses() method that was added in [39104]. (Perhaps validate_user_can_query_private_statuses() should also be deprecated?)

[desrosj]

This is looking good. It would be great to have some tests, though. @dlh are you able to tackle that?

[dlh]

I'll do my best to add tests in time for 5.1!

[pento]

Aye, this should probably be deprecated. I'm nearly inclined to just remove it, except that it is technically possible to call it without causing a PHP error.

Either way, I'd prefer to land this early, so moving to 5.2.

[kadamwhite]

Agree this should be deprecated. We can get this in for 5.2 soon if we can get some tests; @dlh are you still interested in adding those, or would you like some assistance?

[kadamwhite]

Update: After searching through the plugin directory I do not see any usage of this method. (Every occurrence of validate_user_can_query_private_statuses is in relation to a plugin-defined local class method, all of them copy-pasted from the original V2 REST API and none of which reference this controller or any parent.) On those grounds I'm going to agree with @pento that I think we can remove it entirely.

[dlh]

I'd still be interested, although it might be a couple weeks until I'm able to write them, so anyone else who has time before then is definitely welcome.

I'm not certain I follow, though, whether tests would still be needed if the method is removed? Would these be additional tests for sanitize_post_statuses() or for something else?

[dlh]

45611.2.diff​ removes the method per comment:8.

Also removing the needs-unit-tests keyword per ​discussion in Slack.

[kadamwhite]

In 44934:

REST API: Remove unused attachments controller method.

The validate_user_can_query_private_statuses method is itself unused, and calls a parent class method previously removed in r39104.

Props dlh.
Fixes #45611.