BP_REST_Group_Membership_Endpoint::delete_item_permissions_check( WP_REST_Request $request )
Check if a given request has access to delete a group member.
Description
Parameters
- $request
-
(Required) Full details about the request.
Return
(WP_Error|bool)
Source
File: bp-groups/classes/class-bp-rest-group-membership-endpoint.php
public function delete_item_permissions_check( $request ) {
$retval = true;
if ( ! is_user_logged_in() ) {
$retval = new WP_Error(
'bp_rest_authorization_required',
__( 'Sorry, you need to be logged in to view a group membership.', 'buddyboss' ),
array(
'status' => rest_authorization_required_code(),
)
);
}
$user = bp_rest_get_user( $request['user_id'] );
if ( true === $retval && ! $user instanceof WP_User ) {
return new WP_Error(
'bp_rest_group_member_invalid_id',
__( 'Invalid group member ID.', 'buddyboss' ),
array(
'status' => 404,
)
);
}
$group = $this->groups_endpoint->get_group_object( $request['group_id'] );
if ( true === $retval && ! $group instanceof BP_Groups_Group ) {
$retval = new WP_Error(
'bp_rest_group_invalid_id',
__( 'Invalid group ID.', 'buddyboss' ),
array(
'status' => 404,
)
);
}
// Site administrators can do anything.
if ( true === $retval && bp_current_user_can( 'bp_moderate' ) ) {
$retval = true;
} elseif ( true === $retval ) {
$loggedin_user_id = bp_loggedin_user_id();
if ( $user->ID !== $loggedin_user_id ) {
if ( true === $retval && ! groups_is_user_admin( $loggedin_user_id, $group->id ) && ! groups_is_user_mod( $loggedin_user_id, $group->id ) ) {
$retval = new WP_Error(
'bp_rest_authorization_required',
__( 'Sorry, you need to be logged in to view a group membership.', 'buddyboss' ),
array(
'status' => rest_authorization_required_code(),
)
);
}
} else {
// Special case for self-removal: don't allow if it'd leave a group with no admins.
$user = bp_rest_get_user( $request['user_id'] );
$group = $this->groups_endpoint->get_group_object( $request['group_id'] );
$loggedin_user_id = bp_loggedin_user_id();
$group_admins = groups_get_group_admins( $group->id );
if ( true === $retval && 1 === count( $group_admins ) && $loggedin_user_id === $group_admins[0]->user_id && $user->ID === $loggedin_user_id ) {
$retval = new WP_Error(
'bp_rest_authorization_required',
__( 'Sorry, you need to be logged in to view a group membership.', 'buddyboss' ),
array(
'status' => rest_authorization_required_code(),
)
);
}
}
}
/**
* Filter the group members `delete_item` permissions check.
*
* @param bool|WP_Error $retval Returned value.
* @param WP_REST_Request $request The request sent to the API.
*
* @since 0.1.0
*/
return apply_filters( 'bp_rest_group_members_delete_item_permissions_check', $retval, $request );
}
Changelog
| Version | Description |
|---|---|
| 0.1.0 | Introduced. |
Questions?
We're always happy to help with code or other questions you might have! Search our developer docs, contact support, or connect with our sales team.