forbid admin user on frontend

2018-10-22 10:58:45 +02:00
parent 3d6f15dd4f
commit 790d24a1f6
1 changed files with 6 additions and 0 deletions
--- a/backend/app/plugins/wiaas/includes/class-wiaas-authentication.php
+++ b/backend/app/plugins/wiaas/includes/class-wiaas-authentication.php
@@ -166,6 +166,12 @@ class Wiaas_Authentication {
 	 */

 	public static function authenticate_rest_user_on_login($data, $user) {
+		// if admin do nothing
+		if ($user->ID === self::SUPER_ADMIN_USER_ID) {
+			return new WP_Error('wiaas_authentication_error', 'No Customer permissions!',  array(
+				'status' => 403,
+			));
+		}
 		$role = user_can($user->ID, 'wiaas_customer') ? 'customer' : '';
 		$user->set_role($role);