Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Editor: Fix 403 forbidden error for users with low capabilities #60987

Closed
Mamaduka opened this issue Apr 23, 2024 · 0 comments · Fixed by #63296
Closed

Editor: Fix 403 forbidden error for users with low capabilities #60987

Mamaduka opened this issue Apr 23, 2024 · 0 comments · Fixed by #63296
Assignees
@jorgefilipecosta
Labels
[Package] Edit Post /packages/edit-post [Package] Editor /packages/editor [Status] In Progress Tracking issues with work in progress [Type] Bug An existing feature does not function as intended

Comments

@Mamaduka
Copy link
Member

Mamaduka commented Apr 23, 2024 •
edited
Loading

Currently, the editor generates two 403 (forbidden) errors for users with low capabilities. Both requests are made to the /settings endpoint, which requires manage_options capabilities; the capability is only available for administrators by default.

Sources

Proposed solution

  • Re-evaluate each case and apply the fix.
  • Add an e2e test to avoid similar regressions in the future.
@Mamaduka Mamaduka added [Type] Bug An existing feature does not function as intended [Package] Editor /packages/editor [Package] Edit Post /packages/edit-post labels Apr 23, 2024
@Mamaduka Mamaduka mentioned this issue May 1, 2024
Merged
@jorgefilipecosta jorgefilipecosta self-assigned this Jul 9, 2024
@jorgefilipecosta jorgefilipecosta mentioned this issue Jul 9, 2024
Merged
@github-actions github-actions bot added the [Status] In Progress Tracking issues with work in progress label Jul 9, 2024
@github-project-automation github-project-automation bot moved this from 📥 Todo to ✅ Done in WordPress 6.6 Editor Tasks Jul 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jorgefilipecosta jorgefilipecosta

Labels
[Package] Edit Post /packages/edit-post [Package] Editor /packages/editor [Status] In Progress Tracking issues with work in progress [Type] Bug An existing feature does not function as intended
Projects
No open projects
WordPress 6.6 Editor Tasks
Status: ✅ Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add: Permission checks to avoid 403 errors on non admin roles. WordPress/gutenberg
2 participants
@Mamaduka @jorgefilipecosta