Skip to content

fix: filter presence read paths by per-post capability - #174

Merged
josephfusco merged 1 commit into
mainfrom
fix/widget-per-room-auth
Aug 7, 2026
Merged

fix: filter presence read paths by per-post capability#174
josephfusco merged 1 commit into
mainfrom
fix/widget-per-room-auth

Conversation

@josephfusco

Copy link
Copy Markdown
Collaborator

#128 scoped the gap as REST-only, so #158 closed the REST path while the Active Posts widget and the admin bar kept serving post titles, edit links and editor names for every room to anyone with edit_posts.

Closes #128

Use of AI Tools

AI assistance: Yes
Tool(s): Claude Code
Model(s): Claude Opus 5
Used for: Drafting and implementation

@josephfusco josephfusco added [Type] Bug An existing feature is broken [Area] Widgets Issues for the dashboard widgets [Area] Admin UI Issues for the admin UI integrations Privacy Work relates to privacy of presence data labels Jul 31, 2026
@github-actions

Copy link
Copy Markdown
Contributor

▶ Preview in WordPress Playground

Open in WordPress Playground

Boots a fresh WordPress with this PR's presence-api build, seeds 5 demo users, and drops you on the dashboard.

Stress-test variant: 40 demo users · Built from 1c4b83c41dd955ca0ba7bebf7046a503b56f4ffd. Auto-updates when you push.

@josephfusco
josephfusco marked this pull request as ready for review August 7, 2026 19:09
@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the props-bot label.

Core Committers: Use this line as a base for the props when committing in SVN:

Props iamchitti, joefusco.

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.

@josephfusco
josephfusco merged commit d009a97 into main Aug 7, 2026
21 checks passed
@josephfusco
josephfusco deleted the fix/widget-per-room-auth branch August 8, 2026 18:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

[Area] Admin UI Issues for the admin UI integrations [Area] Widgets Issues for the dashboard widgets Privacy Work relates to privacy of presence data [Type] Bug An existing feature is broken

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Presence room authorization is not enforced per room

1 participant