Special Content

Get rid of this Strict Standards warning WooCommerce: get_current_screen not working with multi language Can’t login on WordPress Force HTTPS using .htaccess – stuck in redirect loop WordPress: Ajax not working to insert, query and result data

Home Science, Programming and Technology WordPress Authenticating user for custom post type

Authenticating user for custom post type

February 28, 20233 Views

placeholder

Referring to the docs got add_meta_box,

// Check permissions
if ( 'page' == $_POST['post_type'] ) {
    if ( !current_user_can( 'edit_page', $post_id ) )
        return;
    } else {
    if ( !current_user_can( 'edit_post', $post_id ) )
        return;
    }
}

If I want to authenticate a user for editing a custom post type “portfolio”, do I do something like

if ($_POST['post_type'] != 'portfolio' || !current_user_can_for_blog($post_id, 'edit_post')) 
    return;

Post Views: 3

Leave a Reply Cancel reply

You must be logged in to post a comment.

1 comment

Anonymous says:

February 28, 2023 at 11:17 pm
No, the function current_user_can_for_blog expects a blog ID to be passed to it, not a post ID. I would change it to be like this:
```
if( isset( $_POST['post_type'] ) && $_POST['post_type'] != 'portfolio' ) {
    if ( !current_user_can( $post_id, 'edit_post' ) ) 
        return;
}
```
Log in to Reply