Cavemanon/piratepoet
7
Fork 0
Code Pull Requests Actions Releases 16 Activity

Check post-types validity for requests

Browse Source 
[MAILPOET-4082]
This commit is contained in:
Sam Najian
2022-03-04 14:16:46 +01:00
committed by Rodrigo Primo
parent 789385b0c4
commit b800cf189f
3 changed files with 61 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
mailpoet/lib/API/JSON/v1/AutomatedLatestContent.php
View File

@ -4,23 +4,33 @@ namespace MailPoet\API\JSON\v1;
use MailPoet\API\JSON\Endpoint as APIEndpoint;
use MailPoet\Config\AccessControl;
use MailPoet\Newsletter\AutomatedLatestContent as ALC;
use MailPoet\Util\APIPermissionHelper;
use MailPoet\WP\Functions as WPFunctions;
use MailPoet\WP\Posts as WPPosts;
class AutomatedLatestContent extends APIEndpoint {
/** @var \MailPoet\Newsletter\AutomatedLatestContent */
/** @var ALC */
public $ALC;
/*** @var WPFunctions */
private $wp;
/*** @var APIPermissionHelper */
private $permissionHelper;
public $permissions = [
'global' => AccessControl::PERMISSION_MANAGE_EMAILS,
];
public function __construct(
\MailPoet\Newsletter\AutomatedLatestContent $alc,
ALC $alc,
APIPermissionHelper $permissionHelper,
WPFunctions $wp
) {
$this->ALC = $alc;
$this->wp = $wp;
$this->permissionHelper = $permissionHelper;
}
public function getPostTypes() {
@ -65,14 +75,24 @@ class AutomatedLatestContent extends APIEndpoint {
return $this->successResponse(array_values($terms));
}
/**
* @param \WP_Post[] $posts
* @return \WP_Post[]
*/
private function getPermittedPosts($posts) {
return array_filter($posts, function ($post) {
return $this->permissionHelper->checkReadPermission($post);
});
}
public function getPosts($data = []) {
return $this->successResponse(
$this->ALC->getPosts($data)
$this->getPermittedPosts($this->ALC->getPosts($data))
);
}
public function getTransformedPosts($data = []) {
$posts = $this->ALC->getPosts($data);
$posts = $this->getPermittedPosts($this->ALC->getPosts($data));
return $this->successResponse(
$this->ALC->transformPosts($data, $posts)
);
@ -83,7 +103,7 @@ class AutomatedLatestContent extends APIEndpoint {
$renderedPosts = [];
foreach ($data['blocks'] as $block) {
$posts = $this->ALC->getPosts($block, $usedPosts);
$posts = $this->getPermittedPosts($this->ALC->getPosts($block, $usedPosts));
$renderedPosts[] = $this->ALC->transformPosts($block, $posts);
foreach ($posts as $post) {