fix: add post_lock check on edit/delete mutation

src/Mutation/PostObjectDelete.php

@@ -51,6 +51,10 @@ public static function get_input_fields( $post_type_object ) {
 				'type'        => 'Boolean',
 				'description' => __( 'Whether the object should be force deleted instead of being moved to the trash', 'wp-graphql' ),
 			],
+			'ignoreEditLock' => [
+				'type' => 'Boolean',
+				'description' => __( 'Override the edit lock when another user is editting the post', 'wp-graphq' ),
+			],
 		];
 	}
 
@@ -132,6 +136,18 @@ public static function mutate_and_get_payload( WP_Post_Type $post_type_object, s
 				throw new UserError( sprintf( __( 'The %1$s with id %2$s is already in the trash. To remove from the trash, use the forceDelete input', 'wp-graphql' ), $post_type_object->graphql_single_name, $post_id ) );
 			}
 
+			require_once ABSPATH . 'wp-admin/includes/post.php';
+
+			if ( function_exists( 'wp_check_post_lock' ) ) {
+				$user_id = wp_check_post_lock( $post_id );
+				// If post is locked and the override is not specified, do not allow the edit
+				if ( $user_id && true !== $input['ignoreEditLock'] ) {
+					$user = get_userdata( $user_id );
+					/* translators: %s: User's display name. */
+					throw new UserError( sprintf( __( 'You cannot delete this item. %s is currently editing.', 'wp-graphql' ), esc_html( $user->display_name ) ) );
+				}
+			}
+
 			/**
 			 * Delete the post
 			 */

src/Mutation/PostObjectUpdate.php

@@ -50,7 +50,11 @@ public static function get_input_fields( $post_type_object ) {
 					// translators: the placeholder is the name of the type of post object being updated
 					'description' => sprintf( __( 'The ID of the %1$s object', 'wp-graphql' ), $post_type_object->graphql_single_name ),
 				],
-			]
+				'ignoreEditLock' => [
+					'type' => 'Boolean',
+					'description' => __( 'Override the edit lock when another user is editting the post', 'wp-graphq' ),
+				],
+				]
 		);
 	}
 
@@ -130,6 +134,18 @@ public static function mutate_and_get_payload( $post_type_object, $mutation_name
 				throw new UserError( sprintf( __( 'Sorry, you are not allowed to update %1$s as this user.', 'wp-graphql' ), $post_type_object->graphql_plural_name ) );
 			}
 
+			require_once ABSPATH . 'wp-admin/includes/post.php';
+
+			if ( function_exists( 'wp_check_post_lock' ) ) {
+				$user_id = wp_check_post_lock( $post_id );
+				// If post is locked and the override is not specified, do not allow the edit
+				if ( $user_id && true !== $input['ignoreEditLock'] ) {
+					$user = get_userdata( $user_id );
+					/* translators: %s: User's display name. */
+					throw new UserError( sprintf( __( '%s is currently editing this post.', 'wp-graphql' ), esc_html( $user->display_name ) ) );
+				}
+			}
+
 			/**
 			 * @todo: when we add support for making posts sticky, we should check permissions to make sure users can make posts sticky
 			 * @see : https://github.com/WordPress/WordPress/blob/e357195ce303017d517aff944644a7a1232926f7/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php#L640-L642