Throws error when endpoint method is not found

This commit is contained in:
Vlad
2017-08-31 15:18:22 -04:00
parent 5b8b8c8441
commit cc8b7b45ed
2 changed files with 24 additions and 0 deletions

View File

@ -130,6 +130,10 @@ class API {
$endpoint = new $this->_request_endpoint_class();
if(!method_exists($endpoint, $this->_request_method)) {
throw new \Exception(__('Invalid API endpoint method.', 'mailpoet'));
}
// check the accessibility of the requested endpoint's action
// by default, an endpoint's action is considered "private"
if(!$this->validatePermissions($this->_request_method, $endpoint->permissions)) {