WordPress/wp-includes/rest-api/endpoints
Pascal Birchler a225165010 Role/Capability: Add support for capability queries in WP_User_Query.
Similar to the existing `role`/`role__in`/`role__not_in` query arguments, this adds support for three new query arguments in `WP_User_Query`:

* `capability` 
* `capability__in`
* `capability__not_in`

These can be used to fetch users with (or without) a specific set of capabilities, for example to get all users
with the capability to edit a certain post type.

Under the hood, this will check all existing roles on the site and perform a `LIKE` query against the `capabilities` user meta field to find:

* all users with a role that has this capability
* all users with the capability being assigned directly

Note: In WordPress, not all capabilities are stored in the database. Capabilities can also be modified using filters like `map_meta_cap`. These new query arguments do NOT work for such capabilities.

The prime use case for capability queries is to get all "authors", i.e. users with the capability to edit a certain post type.

Until now, `'who' => 'authors'` was used for this, which relies on user levels. However, user levels were deprecated a long time ago and thus never added to custom roles. This led to constant frustration due to users with custom roles missing from places like author dropdowns.

This updates any usage of `'who' => 'authors'` in core to use capability queries instead.

Subsequently, `'who' => 'authors'` queries are being **deprecated** in favor of these new query arguments.

Also adds a new `capabilities` parameter (mapping to `capability__in` in `WP_User_Query`) to the REST API users controller.

Also updates `twentyfourteen_list_authors()` in Twenty Fourteen to make use of this new functionality, adding a new `twentyfourteen_list_authors_query_args` filter to make it easier to override this behavior.

Props scribu, lgladdly, boonebgorges, spacedmonkey, peterwilsoncc, SergeyBiryukov, swissspidy.
Fixes #16841.

Built from https://develop.svn.wordpress.org/trunk@51943


git-svn-id: http://core.svn.wordpress.org/trunk@51532 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-10-27 18:43:57 +00:00
..
class-wp-rest-application-passwords-controller.php Application Passwords: Improve various user-facing and developer-facing terminology. 2021-07-19 21:14:57 +00:00
class-wp-rest-attachments-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-autosaves-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-block-directory-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-block-renderer-controller.php Docs: Document the globals used in some REST API methods. 2021-06-30 12:34:56 +00:00
class-wp-rest-block-types-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-blocks-controller.php Role/Capability: Use meta caps edit_post, read_post, and delete_post directly. 2020-05-23 15:24:07 +00:00
class-wp-rest-comments-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-controller.php Coding Standards: Use static closures when not using $this. 2021-08-26 12:59:02 +00:00
class-wp-rest-pattern-directory-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-plugins-controller.php Coding Standards: Use static closures when not using $this. 2021-08-26 12:59:02 +00:00
class-wp-rest-post-statuses-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-post-types-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-posts-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-revisions-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-search-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-settings-controller.php REST API: Update “object” strings to use the appropriate nouns. 2021-05-25 13:12:58 +00:00
class-wp-rest-sidebars-controller.php Widgets: Revert [51705]. 2021-09-09 21:40:57 +00:00
class-wp-rest-site-health-controller.php Security, Site Health: Improve accuracy in messaging about HTTPS support. 2021-01-29 19:10:58 +00:00
class-wp-rest-taxonomies-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-templates-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-terms-controller.php Docs: Correct documentation for rest_{$post_type}_query and rest_{$taxonomy}_query filters. 2021-07-01 09:12:59 +00:00
class-wp-rest-themes-controller.php Code Modernization: Fix parameter name mismatches for parent/child classes in WP_REST_Controller::prepare_item_for_response(). 2021-09-09 18:36:57 +00:00
class-wp-rest-users-controller.php Role/Capability: Add support for capability queries in WP_User_Query. 2021-10-27 18:43:57 +00:00
class-wp-rest-widget-types-controller.php REST API: Sort widget types by their id. 2021-10-02 21:45:03 +00:00
class-wp-rest-widgets-controller.php Widgets: Revert [51705]. 2021-09-09 21:40:57 +00:00