Merge pull request #7869 from Automattic/fix/course-structure-exposing-lesson-initial-content

Fix course structure API exposing the lesson AI generated bootstrap text

Author: m1r0

changelog/fix-course-structure-exposing-lesson-initial-content

@@ -0,0 +1,4 @@
+Significance: patch
+Type: fixed
+
+Fix the course structure API exposing the lesson AI generated bootstrap text

includes/class-sensei-course-structure.php

@@ -187,7 +187,9 @@ private function prepare_lesson( WP_Post $lesson_post ): array {
 			'title'          => $lesson_post->post_title,
 			'draft'          => 'draft' === $lesson_post->post_status,
 			'preview'        => Sensei_Utils::is_preview_lesson( $lesson_post->ID ),
-			'initialContent' => get_post_meta( $lesson_post->ID, '_initial_content', true ),
+			'initialContent' => current_user_can( 'edit_lesson', $lesson_post->ID )
+				? get_post_meta( $lesson_post->ID, '_initial_content', true )
+				: '',
 		];
 	}
 

phpcs.xml.dist

@@ -87,6 +87,8 @@
 				<element value="manage_sensei_grades"/>
 				<element value="edit_course"/>
 				<element value="edit_courses"/>
+				<element value="edit_lesson"/>
+				<element value="edit_lessons"/>
 				<element value="edit_published_lessons"/>
 			</property>
 		</properties>