Skip to content

Instantly share code, notes, and snippets.

  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
Star You must be signed in to star a gist
Save kellenmace/42d8d48c9f90df7b3fce11d8b3c355a0 to your computer and use it in GitHub Desktop.
Limit a WordPress Pages post collection request to only users with the required permissions
<?php
/**
* Limit a Pages post collection request to only users with the required permissions.
*
* @author Kellen Mace
*
* @param array $args Key value array of query var to query value.
*
* @return array $args Key value array of query var to query value, possibly modified.
*/
function km_limit_rest_api_read_access_to_protected_pages( $args ) {
// If this user is logged in, then query for Pages as usual,
// including both those that are protected and those that aren't.
// If desired, you could go a step further and check if they
// have a certain role/capabilities.
if ( is_user_logged_in() ) {
return $args;
}
// If the user is not logged in, modify the query to only include
// Pages that are not protected.
$args['meta_query'][] = [
'key' => '_is_protected_content',
'value' => true,
'compare' => '!=',
];
$args['meta_query']['relation'] = 'AND';
return $args;
}
add_filter( 'rest_page_query', 'km_limit_rest_api_read_access_to_protected_pages' );
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment