Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: add post_lock check on edit/delete mutation #2643

Merged
merged 19 commits into from Feb 7, 2023

Conversation

markkelnar
Copy link
Contributor

@markkelnar markkelnar commented Dec 1, 2022

What does this implement/fix? Explain your changes.

Check is the post if locked by another user when post mutation to update/delete. Provide an override option.

Does this close any currently open issues?

closes 379

Any relevant logs, error output, GraphiQL screenshots, etc?

(If it’s long, please paste to https://ghostbin.com/ and insert the link here.)

Any other comments?

Where has this been tested?

Operating System:

WordPress Version:

src/Mutation/PostObjectUpdate.php Outdated Show resolved Hide resolved
src/Mutation/PostObjectDelete.php Outdated Show resolved Hide resolved
@jasonbahl jasonbahl changed the title Add post_lock check on edit/delete mutation fix: add post_lock check on edit/delete mutation Dec 1, 2022
Copy link
Collaborator

@jasonbahl jasonbahl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I suggested some changes, and Github bot found some as well.

Also, we should add some tests:

  • Test that a post that's currently locked cannot be mutated by default
  • Test that passing ignoreEditLock allows the mutation to proceed, assuming the mutation is being done by a user with permission to mutate
  • Test that passing ignoreEditLock doesn't allow a public user to bypass other permission checks

@coveralls
Copy link

coveralls commented Dec 1, 2022

Coverage Status

Coverage: 84.795% (+0.02%) from 84.775% when pulling 37efad5 on markkelnar:check-post-lock-on-edit into 2fc55ca on wp-graphql:develop.

src/Mutation/PostObjectUpdate.php Outdated Show resolved Hide resolved
src/Mutation/PostObjectDelete.php Outdated Show resolved Hide resolved
jasonbahl
jasonbahl previously approved these changes Feb 7, 2023
@codeclimate
Copy link

codeclimate bot commented Feb 7, 2023

Code Climate has analyzed commit 37efad5 and detected 1 issue on this pull request.

Here's the issue category breakdown:

Category Count
Complexity 1

View more on Code Climate.

@jasonbahl jasonbahl merged commit 9159e44 into wp-graphql:develop Feb 7, 2023
This was referenced Mar 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Mutations should respect edit locks
3 participants