Skip to content

Version 1.2.0 - Headless Permission Model.

Choose a tag to compare

@istefan istefan released this 07 Oct 09:09
· 7 commits to main since this release

This is a significant update that reworks the plugin's permission model to better suit modern, headless applications. API permissions are now decoupled from standard WordPress roles, giving developers full control over their application's business logic.

New Features & Enhancements

  • Flexible Permission Model: Introduced a new use_ahoi_api capability that allows any user role (including 'Subscriber') to perform basic API actions like file uploads and email sending.
  • Manager & Admin Views: Added a powerful manage_ahoi_api_all_data capability that allows 'Manager' and 'Administrator' roles to view and manage data entries created by all users.

Bug Fixes

  • Login Response: The authentication endpoint (/token) now correctly includes the user's roles in the response, enabling role-based features in client applications.
  • Windows Compatibility: Resolved a critical activation error that occurred on Windows-based servers due to incorrect file path construction.

Note: After updating, it is recommended to deactivate and reactivate the plugin to ensure the new capabilities are correctly assigned to all user roles.