WordPress.org
Get WordPress

Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #56166, comment 2


Ignore:
Timestamp:
07/07/2022 08:15:23 AM (2 years ago)
Author:
marijnboekel
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #56166, comment 2

    initial v1  
    1 Replying to [comment:1 christinavoudouris]:
    21I understand, and i have already filtered the list returned by the list-users to only return the users the client has access too.
    32In this particular case i'm using the https://developer.wordpress.org/rest-api/reference/users/#retrieve-a-user endpoint
    … …  
    1093. Then change the ID in the browser-url to an ID the logged-in user does not have access to. The REST Api still returns the userdata
    1110
    12 
     11Replying to [comment:1 christinavoudouris]:
    1312> Hey, I looked up the users endpoint in the docs, and you can include or exclude users by ID:
    1413> https://developer.wordpress.org/rest-api/reference/users/#list-users