Version 1.2.0 - Headless Permission Model.
This is a significant update that reworks the plugin's permission model to better suit modern, headless applications. API permissions are now decoupled from standard WordPress roles, giving developers full control over their application's business logic.
New Features & Enhancements
- Flexible Permission Model: Introduced a new
use_ahoi_apicapability that allows any user role (including 'Subscriber') to perform basic API actions like file uploads and email sending. - Manager & Admin Views: Added a powerful
manage_ahoi_api_all_datacapability that allows 'Manager' and 'Administrator' roles to view and manage data entries created by all users.
Bug Fixes
- Login Response: The authentication endpoint (
/token) now correctly includes the user's roles in the response, enabling role-based features in client applications. - Windows Compatibility: Resolved a critical activation error that occurred on Windows-based servers due to incorrect file path construction.
Note: After updating, it is recommended to deactivate and reactivate the plugin to ensure the new capabilities are correctly assigned to all user roles.